{"report_id":"9f5ab3d0-003c-462e-87f7-7ec8b72a7e8d","version":0,"status":"done","tags":[],"date":"2026-07-23T10:00:18Z","url":{"schema":"http","addr":"chainsalyisis.com","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"title":"The Blockchain Data Platform - Chainalysis","dom":{"size":903900,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14187)","md5":"fb0588ae42ff13b4d56cf6d0f9a49377","sha1":"b7381a1782c4021901df0e74014649c15c2add58","sha256":"2141a8506bb9d6b287ec3089ff329c110900da115786310bd151723391f5f03c","sha512":"c65d93965c4e052591e55837da97858de5ceb2b8e16ab7f6f2b58dae311f062de07edadaa50cb9f719c2b1899f232621df036cbdfce531d6826033be4c5a02bd","ssdeep":"12288:62aApIBImNMRXxieo1qJ/VAEB/pUFBJltCk:6vEIBImj","tlshash":"18152b859af0443541d781f99a37ba0ce76192078d04b998bffc46d88fc9d3e9af3609","dom_hash":"domhash36591350e33073c8fa64facfd1da2a72","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chainsalyisis.com","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T10:00:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"chainsalyisis.com","ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":172,"request_count":86,"received_data":9185244,"sent_data":51359,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Qualified","description":"Qualified is a B2B marketer that allows buyers and sales reps to connect through real-time website conversations.","website":"https://www.qualified.com","common_platform_enumeration":"","icon":"Qualified.svg","categories":["Live chat","Marketing automation"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Marketo:164","description":"Marketo develops and sells marketing automation software for account-based marketing and other marketing services and products including SEO and content creation.","website":"https://www.marketo.com","common_platform_enumeration":"","icon":"Marketo.svg","categories":["Marketing automation"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"api.consentjs.datagrail.io","ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-12-21","domain_rank":201935,"first_seen":"2024-04-10T10:42:48Z","last_seen":"2026-07-22T16:56:47.034426Z","alert_count":0,"request_count":6,"received_data":235378,"sent_data":3439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"apivin1.pro","ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-23T10:00:31.640669Z","last_seen":"2026-07-23T10:00:31.640669Z","alert_count":4,"request_count":2,"received_data":606,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"assets.qualified.com","ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-09-20","domain_rank":152169,"first_seen":"2022-04-19T07:31:31Z","last_seen":"2026-07-20T13:36:08.327467Z","alert_count":0,"request_count":2,"received_data":1704,"sent_data":1127,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-07-18T23:31:21.08343Z","alert_count":0,"request_count":2,"received_data":5168,"sent_data":1268,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":3,"received_data":12944,"sent_data":1554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.qualified.com","ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-09-20","domain_rank":106077,"first_seen":"2019-02-21T12:30:45Z","last_seen":"2026-07-19T10:47:11.115446Z","alert_count":0,"request_count":1,"received_data":428521,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.chainalysis.com","ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-28","domain_rank":2616944,"first_seen":"2017-02-22T16:31:47Z","last_seen":"2026-03-06T10:02:57.899887Z","alert_count":0,"request_count":13,"received_data":373976,"sent_data":7652,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.qualified.com","ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-09-20","domain_rank":90356,"first_seen":"2019-01-17T08:21:55Z","last_seen":"2026-07-18T04:30:57.958853Z","alert_count":0,"request_count":5,"received_data":4070,"sent_data":2901,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"3.67.109.71","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-07-16T11:12:29.048666Z","alert_count":0,"request_count":1,"received_data":1663,"sent_data":569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-07-20T07:49:24.133645Z","alert_count":0,"request_count":2,"received_data":144377,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-07-20T01:44:57.513425Z","alert_count":0,"request_count":4,"received_data":12728,"sent_data":2268,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":4,"received_data":2083233,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/modal/modal-wc.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"375d31961c38e0f72edffd22a7c8a00d","sha1":"470471a4dd23451631ae9a43ca98e49bd95bab0a","sha256":"2a5fe3924d25cdcddff875f6d42e9c2c8f9df9a830bc044c82c275f92af046bf","sha512":"436dc281f35f4d0fbf708df94f597f4ee9896892306ecb92cd96d52d27000a9757171dbefda788d505bd655fa4fa54b520c79eaa2a2a19d4469d369f635dfc94","ssdeep":"192:WQ3/J4kvC0FRSy35+2iWygyQ+C5GGd6pAV65hC/yI1qMCj5uX7oO+4ztY+f6nb:WgKfUPLyQd5GGSUqMCjuEJ2N6b","tlshash":"0af141d2a7fc713e12ae015b66e519c9777c84b6d0112e6fbca8ddfc22c09584368db2","size":7834,"data":"","first_seen":"2026-05-11T00:12:50.925834Z","last_seen":"2026-07-23T10:00:42.494219Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/wc-dotlottie.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f9dafc49f3d451cf108eb9d3e7d5c3a","sha1":"bd1df971f2dafca21b45379c7f23459ffb57063f","sha256":"3758e831a87f7e44fe7ff45986e5508f0395c36a4f723393173a96bdd7efc344","sha512":"c6f476b2c11d07130a2c4cadf9139f9bd534d97529f4a5b74afd6cf87c5c89373e3d88e6f4267d1c0f32568e0eaaad32010d27d36c47602c8dc13a77d81cdcb6","ssdeep":"96:KR8nts4Ojr3iteQNBONRv4CDG24SIGe75Tq+KyZ2Dcu7gTYBXLgy:wosHPikEQjvR4SIG0E+XQcRYr","tlshash":"afb110c2fb6d172f87f92062cd1c61d96b7d8c77691186be3d2c53a91148d298361cb2","size":5397,"data":"","first_seen":"2026-05-11T00:12:51.040426Z","last_seen":"2026-07-23T10:00:42.490429Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/src/components/gartner/gartner.widget.loader.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"18440321ce64f7384eec7f6bf599bd5d","sha1":"8220840fd9c3c7bac4c8d905fb3628f03ea0f7f9","sha256":"ee453353176eb94e1eb853252a368c410feaef0615b24df5fe88cf98f1b0de26","sha512":"4652cd7eee15db6273fe545f315103e8528dabdf5ec2f43dd6efa03acbd06534913a2bce229fceee1d2517ea97a20dc1b9454bd8e702542cd490e50583021e9d","ssdeep":"","tlshash":"4511bb8bbdbd853629dc009c422be0ac3734816cf159dca82d4d61214329ed29a73bca","size":1088,"data":"","first_seen":"2024-08-19T13:40:24.311294Z","last_seen":"2026-07-23T10:00:42.505973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1183be1daa5d6c43c51d242fd6ca483e","sha1":"194b0e3307df2427d40c70f7228512a80b75c0ba","sha256":"d58084cddf8161d7bb3b65ecba43d080f86600b7c213b544d0ab8c8ad8a13dd9","sha512":"c3aaac6290325d9ffbd7a11517955558695f8dc8e3a5f788121272dd63ff4c3ab7c750875205ea25220e7ea3877fe17c5705af362c50961c93b62dd06718b1dd","ssdeep":"1536:pjqk7hNIsDK2Ib0QABZe+2Pz//lXi6KPOh6bP5gMCUK1lKBQPy2lbu:d7Vsk3e+2Pz//lXZl2Qhlbu","tlshash":"e9f30c0a66f320345263b1795f2f98063621945b1e99fd583e8c92a25f8d53ca7f0fec","size":164492,"data":"","first_seen":"2026-07-23T10:00:42.561964Z","last_seen":"2026-07-23T10:00:42.561964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"72fd7f662c95f95dc9c7e3e57ec51fea","sha1":"cb12703b823508d973c946dd9f16675e16881845","sha256":"ae2a9362ac39684312afbe02063bbafcc3d5bcb607d92b2d88f6e4443e908c28","sha512":"a058a9b3505afcf769fa2a59b3fa1f83bd0f4907b4959575cdbad4dac9b297c73c7e1b511b70d6a70286b49c7622cafc2471c75dbe71fce67cf4470bdd710849","ssdeep":"","tlshash":"6ad05ec960e141aa20a764b9671fe203ee70220b249d89017ceec384df3106b6a80e8e","size":284,"data":"","first_seen":"2026-07-23T10:00:42.562847Z","last_seen":"2026-07-23T10:00:42.562847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"f271c4de594c52725a2ee6762e137840","sha1":"a0349ca929b3fecf5b0c72dbeb8dbd050e743432","sha256":"34ff850a002fdf0f57e5b6444a730fb076dd6396a12a435a7bf162f929f9e505","sha512":"75d15e9e08cdfb8395489c29d4257bf1e0a18ab59bb979dbec95b59e5a44254bba286e4be266747445869d4297988d5e956efe3d3f5582cb1e8f7bf50e73cfb5","ssdeep":"","tlshash":"0641ec3e06bb1aba0ae7d6799b9e9615733840175009da86fd0cc7081fc887191f8fd9","size":2358,"data":"","first_seen":"2026-07-23T10:00:42.563779Z","last_seen":"2026-07-23T10:00:42.563779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b7bb07266d283acde35e00fa9d70057","sha1":"03dbddff100a13b15e9a139e633c75d1e5cdfb02","sha256":"e9c60c94967d15cf3f6ea373af767bacc7be5f9513501fe28d4571e2f1db0ac1","sha512":"46f493af69e3ee504fd5b5755e3f7b0bba42fc0c58deabf8004577355b5de3cb2d0575e3f556a0b8169c03e080a9f1ade170659b793aa6d8da03104f99351281","ssdeep":"6144:cWWNMRXxieo1qJ/VAEB/pUFBJlwWT9CVjhuOR3uabwjdu1X:wNMRXxieo1qJ/VAEB/pUFBJltCh","tlshash":"4684d6dd972080a582c882f5ad22760ce313a2678d1479a9fbbc48d88fdc53e6df551b","size":391114,"data":"","first_seen":"2026-07-23T10:00:42.564663Z","last_seen":"2026-07-23T10:00:42.564663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"bce8610dba431c54361e703675d76712","sha1":"b6dd1174a2e7f8ec0a649043cd1353541f7a4238","sha256":"f488e03319b57a85b9eeb15ec803d5ec25e89eb00d5ec1b3e84309dbbe8e4064","sha512":"b32268948e6254e434dc759b187a26201a9c680eacefd02f9887e43fea7644a1cec8456537070dae6c4a6308f43484a8b69bcb66c6c9f9328824001c65bd70a0","ssdeep":"","tlshash":"caf0b45ac8541d522f84411076d1f50206bd11076fa8f9f9b7ac825f4f5dc5fa1760ed","size":635,"data":"","first_seen":"2026-07-23T10:00:42.565438Z","last_seen":"2026-07-23T10:00:42.565438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"94632baed5c5e1f0ceedb4eb78750868","sha1":"b5e0bd7e5a84df86c1008748540fb50a96a0032c","sha256":"1bc641314aca88d1971c69f0ce8be850578e3b8a7a75fcce909ebc28862485cd","sha512":"ae3a9cc0f4eba7238f1ed4b1e053657d5559f85b5fd2bdbbe167012bed6e631dc6fa6c1e88b8f2bde1a5c17a44624221a3c181fb9001c1e9477cf993788429c4","ssdeep":"","tlshash":"dbe0d8c692224091923ae4c812a3c6487046ae1f4c9678e073de50ea3f1d07f54b698d","size":415,"data":"","first_seen":"2026-07-23T10:00:42.566287Z","last_seen":"2026-07-23T10:00:42.566287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9d132317f141a90e3db9327698e014c","sha1":"03779268f12404acedb1022a4b8c3e49976ae47e","sha256":"a77b37af99f160e91514a14d8bf1b5fc179b3db4c615244f9a2ccf0a930b20bc","sha512":"2e12825289c114c6b066652245f9f388084b9016c0c859ac4ac54238589561a202ef374fe206f3c0bff0ccd609acfff605c0d4f174eb7315146d0b4b606613ad","ssdeep":"","tlshash":"a4d097df63d9103031cb3a33933dc258307a08072944c180384c00318f20edc2277d8a","size":275,"data":"","first_seen":"2026-07-23T10:00:42.567041Z","last_seen":"2026-07-23T10:00:42.567041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9a1414999fab49df26ec9db49bc1cbf","sha1":"b6862518489e1218417b04392a23148f5d4eef25","sha256":"112999566281728122792c705fca66c062ec6d9fc24690e0ad859190f101e9e1","sha512":"05bebe768ff631b5b40fb3f66f44509ab75acdfbfbe7d3319efb2796c59bf177e0b9eac0ca95f2c7b94e0f5500e4a7ba9d59e68c6ac82ebe47c6b2d381833f0f","ssdeep":"","tlshash":"d961ac3e69b626b059ef723e37af8a5939b000476445ce013d1cdfcc0f68c6695b96d4","size":3223,"data":"","first_seen":"2026-07-23T10:00:42.567868Z","last_seen":"2026-07-23T10:00:42.567868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d208ffe993b74f78e13bd9d6b8a2a6e0","sha1":"e23de0ed4a80652e2a322b33293e59cad3ab1055","sha256":"fb911b8832785594b27e4d121e967c27a0246dcd9614eab9837e78c0fb1adbd4","sha512":"86846d2b3bb912a5f26ffc04b05b342b8796013211881fff9d964526a600fd9f558b757a2b68ccaa1ff1dfda66ce8281528a2b200cdc4e5a1226438779d108de","ssdeep":"","tlshash":"4081ab195af621f55beb743e1bbfa76c71704043114ace583d5c9fc80f948361aa97c8","size":3838,"data":"","first_seen":"2026-07-23T10:00:42.568751Z","last_seen":"2026-07-23T10:00:42.568751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-548V83L","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"044e50ee150f80bc2f79501306b64e1a","sha1":"a9d90df0b9146c3c31d5987f3144b16aaa42ed7a","sha256":"e159e36a35fbc2237952923208c98fa50f08c8a3d5025955680c8226850c96e1","sha512":"65820dd577b04696977c4e3ff652f9767773bcf8881acc861498f5d5aec6072e5fa0ff1a74e955d968f97044cca04a5d57450adb8315557694a8fb7b88fdbfac","ssdeep":"6144:k62Uu8yc1+hI0t9RlGYYwqY5T+cMz9d0C3TnHZI+OY0ft:k62Uu93MVkV","tlshash":"1fb409cdb3da74715393a4b8903f018ba57a28e2f45cd899f089cce42e746994263f7d","size":530478,"data":"","first_seen":"2026-07-23T10:00:42.441591Z","last_seen":"2026-07-23T10:00:42.441591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/shared.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3153f92056b804d8de4f40de698e79ec","sha1":"78dd041ddded2382464706c6030e1e20619cd36a","sha256":"5daf5a2b96b94acd9908fef0aa762fe91fa680ad0fd68c7e0c3d93c6c9d40246","sha512":"f86167f4cae7d98c93824877b55a0ce1f920f882d9b4a6e6742b5c4e2d3be38aaac100a9a494cb58c061734f9f2275f6caecffff64b894a7e77d2aac86210f62","ssdeep":"192:2I63tpRPWQA7gLa2b2WbmANmu2BKDgiHw27WMUyqNF3JGBFhNxOHFLpAJIqE/Mu:J6JrbpdNb2j15H5pAOqw","tlshash":"9822b65b227130364d77107b879b2241b62480577203e859799fcba90f829785b7bfeb","size":10855,"data":"","first_seen":"2026-05-11T00:12:50.982045Z","last_seen":"2026-07-23T10:00:42.470188Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"9a89048290cebd0762bf273ff887864a","sha1":"87a7b34f9fdb6b33639a0bc71130f207f6f2d49c","sha256":"47fb84282c9b85f0efcf0fb50cf1c470648332598816aa9e0ac8f373079463c0","sha512":"c7cf75fd363f9a53ddb1e17e1217f680c8c6fcac281f16d9010def0eafad42073c5c959bb5341c885d1c0a02a835a24d70fd5eddcc2dd23a2a4ee418b2da4412","ssdeep":"","tlshash":"afa001efa0aaf16017c31156a83baa967a36a5db2506741ad90c06417468e4c8236e8c","size":77,"data":"","first_seen":"2023-03-07T12:09:30Z","last_seen":"2026-07-23T10:00:42.569601Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/d4c72912-4490-40c4-9df2-908103a2c854/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac7b5ecae0c1723300ba3ebc893975a","sha1":"5756dec132e1a310084bfa113076574971618eb4","sha256":"3db32e28c360613a3035c8c13d9905dac94eab5d5eb116bbc1192cc3ab0111ee","sha512":"991707ced4de0920f4fb5cb66afa3c7fcd776c6a5c253ff19b15e6754d7133adf3b2c33d1eb46254ff5ccdf50016582eb6116a869c675271f2ff616faf9a33bc","ssdeep":"1536:uN8Fzi8M3HVI4zQc11x/q9tU6erpBeNsRDWojQmnEFOAAnBohYdQQ:nFGXVI9c1uyB5jQqEFOYwQQ","tlshash":"b6b34cb8a385f13c96b70561b1fd690ab5383805b802ccb5d644dc8639d3fdb27e6b68","size":116812,"data":"","first_seen":"2026-05-11T00:12:50.997549Z","last_seen":"2026-07-23T10:00:42.553402Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-23T12:45:39.024073Z","times_seen":905306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/integration.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3eae675c1620f0402ca496bcc267c64","sha1":"ef2dd585b129cde31cdb21edd0e6aae43d42b9b9","sha256":"933a4b331efce4944ca0f3b8aeff0d23a0093faf6081c9784727a2ba8065bb1f","sha512":"a7e37b9b0572d10aabdae30b415982cbee75c7d2baf80c8642a305dae9cdee4b370cb2a9f4281ee9f1fe42bc45f2f1920a756aeea64fae31c7ad2a62c9092159","ssdeep":"384:XPWWCtQzber5ClRqjoIFcgR6Qg1iIZPU6xYhGX7quEotHPaDAiqX8XFXcXgXPXda:XPWDQXszNbk","tlshash":"5ab2844099202e39bd23bea656ccdf4cd12ad4c258eb1a9d7edf510d46c33c90b7a74a","size":24183,"data":"","first_seen":"2026-05-11T00:12:50.92375Z","last_seen":"2026-07-23T10:00:42.5305Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JGEQQZFVHG\u0026cx=c\u0026gtm=4e6331","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3ef8d29808db1a037b9064cf983728","sha1":"3d96710a64080910b3d78de6640e18cf8194abd4","sha256":"09d857e321cadcdb7cf0b28377da83ddbd165142274af210f75a554a2654d7f2","sha512":"511c1aa86e19691099c7692438113164543bb8ee2a713ef28a605363db0fe5a52441b6cc6b9ae7f415b7b7f88172415c280d0a807363b8935aeada8f7de31147","ssdeep":"6144:54fp5Snyc1/T/I0t9RlGYYwqY5T+cMz9d0C3TnHabcK+O1xPMX2P:54fHSjTxM+bcmLcA","tlshash":"77c40aceb3d674225396f468543f01cba97b25e2b49dc8aab0c9cce02d7454a8177f78","size":563920,"data":"","first_seen":"2026-07-23T10:00:42.508495Z","last_seen":"2026-07-23T10:00:42.508495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/site-header/site-header.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"472486dd327ac9d6b1e2624dba84b378","sha1":"489263f8a948cd881d3b4f7c70aca3113835807f","sha256":"b60fafb23ae9481a885f486238f87ed1f3933282e829b10e510c834d9ee2c844","sha512":"de9b9c062e3d023507e0ae5850cf0003e5c47ef6da0a386dba35aced97b75fc3506a76e861dd1c71f04457e900bcab028c2cddd0fd6f72286630d7d5bf07f77a","ssdeep":"192:xq212Xs+O3NR7AzjiHmzjpz62bdIN5Tkc2vm+eW8wEhPc:xq212XsN3NCXzJIjFpO","tlshash":"1022307a9d72253204f7c5dae3cfa944f62000076145c9693aedc7092fc1da269fabf9","size":10356,"data":"","first_seen":"2026-05-11T00:12:51.00137Z","last_seen":"2026-07-23T10:00:42.480322Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/connectors-CWtDSj7T.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"efc74bd93a86088993588f965c56d238","sha1":"1d94951245b86d53b87c680ab9ac39433006fe26","sha256":"d759293fe0280013a94611db5f12e07961b7094755ac3af6ad640226227c3212","sha512":"48d5aa6842a32436150697a74a728a42f57651896dc81223c76d588a16ee6ca65d82719dc1b5b3a11ec96c7b71d839573a1fe93687a55ad795a24f81f65c3dea","ssdeep":"","tlshash":"0f9004151051c3150011d345115cc41371104d54350f34c040cc0dd473134045410300","size":41,"data":"","first_seen":"2026-05-11T00:12:39.041272Z","last_seen":"2026-07-23T10:00:42.507166Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/5f57e9a1-1c98-4664-b832-805901aa6aba/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66205d735388250e2f8e53600ff3b325","sha1":"c515de1f30d4aaae643bf0f97b67e9a259a9f5c3","sha256":"95ec5eaef664034ac04a61efd1a16097580de794f0d337e15dbfeda5c3041472","sha512":"fe553ba83492632358010f2a915105c9a15254e13c985d8e47dd2dabcbbde01c17cd6d7b4fc13d22f73b034392d1d5537f832be757c5c2ef54c0384a17c9f306","ssdeep":"1536:NBo5ziX0tcBwaOi79hkLGD1VDRoN9wZ+xuQTL56aMwbVCF:c5lqBW2kLu42Z+4aMA2","tlshash":"8cb34cb8a385f13c86bb596171fd680af5383805f802ccb2d5449c8625d3fdb2ad6b78","size":114424,"data":"","first_seen":"2026-05-11T00:12:50.971062Z","last_seen":"2026-07-23T10:00:42.504831Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/ChainSelectModal-DwW9MO4J.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"862ea730fab6d10afa418e32e6519a26","sha1":"e1e6d8f531b8f1899daec6fcda1526edc381ae90","sha256":"0ea324065dea85a06d0b71a1bb80b007e71f34613478496df4e7f25bfacfa83e","sha512":"81ff4d4dd939d41f73aa90ef919f2927a19c3a26c081193ca6ac5ae1db09f41ef4552cc1b2c6cf986f522b1cfc158869397f364ac3ec8105f10237ce0a33b000","ssdeep":"384:x+qlNQC7sccDLJ6dwNx+B/74aVMb49dse:UqlGGsBLJ6dwNxizDVMm","tlshash":"21a2b415c7b0226a2667217c195f8a657231048f0f19beac3f8c15a08f5c66f2df67ee","size":21938,"data":"","first_seen":"2026-05-11T00:12:50.884887Z","last_seen":"2026-07-23T10:00:42.516412Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f2c9d707b05cd1839f0a41cabccac5d","sha1":"241f4069730a4a371a55403a79bfdc35f9e31fbc","sha256":"548b86fe6da6e3703f18bb0f1a3a6f58e6b65ec13341b7bed09fa6e2c36d7d5f","sha512":"47667b7a339fff0ba2cf433c07a3bca45a1f0a722d696554c0e711032b5ee79616b6c194c5f8f1ee781a012f2187a21720445b50bf32cb5d9fa23e3d8fd94743","ssdeep":"","tlshash":"f5014145702250e6a4e1216680afb31170f30da1f804e491a8f9c8c69c7df5f9eabe8c","size":807,"data":"","first_seen":"2026-07-23T10:00:42.57013Z","last_seen":"2026-07-23T10:00:42.57013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/requests-7CjONt2q.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"7cc8c0dc9bcc0539d3726d896ad21716","sha1":"80484e86e9febb2ce7dfeca16ea77b588d5a9be6","sha256":"0d5f44eb5be72399be2539a7f5d04f5d54ca0c31e5fbc53086bf1f1d0b8dadd4","sha512":"6b45e73d0166dba8866b32ee059df79dbc72a7ebdc1122603b0b5f310e2c8ddd6fa14262a9d1868c8b4884a3ba26b424ab50994718e88bf20beb3d41a303566d","ssdeep":"3072:sPsj/XP72/53Gc6U54vvhiQGHiSLdXqi1aQwGzn5UK+UzVIHbWqhvjaMZRVwnJEu:5j/XP72/53Gc6U54vvhiQGHiSLd6i1ai","tlshash":"acf3638a6de324c0622bf438072f9845e166341b1e29fc0d745d96b48f5d62d0bfafb9","size":172007,"data":"","first_seen":"2026-05-11T00:12:51.105246Z","last_seen":"2026-07-23T10:00:42.534827Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/src/components/ashby/ashby.widget.loader.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"546c2d1448ccebce189886fe085e2f9a","sha1":"df86244868d5076c9fcb6fa61d21694b2a3a7d4e","sha256":"54785003bcee3170f2af66edbe6cb3d12e56534b765db16f06524099f67f6a71","sha512":"27e697067e50aae3a922940b8e59ec3c2c360e199a1be3a5be59771dd2aa607e86db20c1e7e4a8cb96e4a1bba872d93ff378354721fd3f976dea373d17a415fa","ssdeep":"","tlshash":"1501eb0b693c883228e911ccc22bf17c3378c12cf016dca43e4d5112022aed65917bd5","size":838,"data":"","first_seen":"2024-08-19T13:40:24.310045Z","last_seen":"2026-07-23T10:00:42.523509Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124","fqdn":"js.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12675ac278b18189819fcbc928b59e39","sha1":"8ef30206ec80e0ac392e0e70e19a0eae4206058d","sha256":"992f5feb7c743c9317b7db8a30270a8f1932d078559c3a3d00e93c4456d6b25c","sha512":"36e37fafc25ac9a43dd70df54d67f86fa36e96069145bd30b035102c8a0adf9cd7109057c3c6ca06057ef5e6410c37e699ecb5b1330cd4399e93bbc0d48ca654","ssdeep":"6144:SdkOD+zvfsZwMAFuYiOi51m1onqhQZyM9S+Jd5sfdTmj33TU9:tfsZwQ07q5cP","tlshash":"3b944c877356747203dbc19298365103f3397658280c846cfaacdddaa758d89b2b3f7a","size":427611,"data":"","first_seen":"2026-07-23T10:00:42.452593Z","last_seen":"2026-07-23T10:00:42.452593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/mui-aN3YpZsM.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"af4e473a276686b0bde13e8de01d6349","sha1":"7ed92de68326c0c9e73f16bf4d2d37d8c8ac59f7","sha256":"551d59ba5f40312bd8b5ac15e655c253cefae3643fa3a795dd573bab5e2186bd","sha512":"3fc6dd7a679df2be1783e663b8fd3fc8d91c1ad545b6b23aee70fe2ad623df372a1d62589a3d96e8faddb570f62ddc7b11fb9d71606020e4d78c2954f3530399","ssdeep":"3072:CpfmmQpzHI4aBX0brnymY/jW+CZpVxc9xacelNvgk:CpZeI44EvujW+yxc9xAlNx","tlshash":"2264c60966f120310513e0b95a1fcd1ab62955076e6efd68badc92682f4d03cd2f3bed","size":310770,"data":"","first_seen":"2026-05-11T00:12:38.992437Z","last_seen":"2026-07-23T10:00:42.558353Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-860366224\u0026cx=c\u0026gtm=4e6331","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b0e6c3cf58a74646a082ebb05326e98","sha1":"94dc59759fb556a4d24641b7357cf01891a7681f","sha256":"0e40510031d0c8a4b5028ef3dbe7bc8e781b91c51130e23f050ec3fffd57b8c1","sha512":"6cfb827bf208c6ce7931e20b189890cf826b268ef3fe8fbdbbb75523ea35ca4131782bd16c1e103397ee40d7e924717b05b9c58fe633b814a51f9924ad568a36","ssdeep":"6144:05vQU0jNo7P69FMxmRkqn0hdBScPmfxNf3Ej+x+GawoXt5:05vdYqP69V3KqxiwOt5","tlshash":"e8a419cdb3d670629396f478503f018ba57a28e2f448c899f189dce42e7465a8277f7c","size":455863,"data":"","first_seen":"2026-07-23T10:00:42.477035Z","last_seen":"2026-07-23T10:00:42.477035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/wc-swiper.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd0d940f00fdf336c07a2dea84bf3a12","sha1":"fb7c68a0f600ca660042b650e5575b7666e15026","sha256":"fcabcbaa70b722db347116838b4aa69e085e17f465e6cc71a7e5f6cc735057db","sha512":"43c4552f481a0674711076da9ff77e4e4d5162058973f28fc9fefac4c1fba67cb2305c99b8122d3f5738ee8ccc3c79e58c1ea0155dd8116e730b8b7f6660b5c8","ssdeep":"","tlshash":"da5144c2f73c35290abe70ba599861c3b67d4140b45375e9298ec86ce2c5866837dae3","size":3022,"data":"","first_seen":"2026-05-11T00:12:51.127815Z","last_seen":"2026-07-23T10:00:42.513378Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-includes/js/jquery/jquery.min.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-23T12:45:39.036205Z","times_seen":987026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/marketo-style-control-js-before","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8db9bcacc2cbb9117db159052b6d327","sha1":"0aed60729a8247210dbf4bc03b707f8749ed58aa","sha256":"2aa391b1e0517e5222061d61588402aa974f3274dd2e6084db63c6eebf6edc0a","sha512":"53526e3b3fbaf4b4e4347196ff0726ebffb1ecf64f92dc9436db19a9f6c19efbf4784aa0c05932a03433030a69ab53671224842cbffa3d1a43b79a5d6cea666f","ssdeep":"12:RKuRAi6QWP8KIFceuHKq6DuuHKuH0gdvE9qjYJa29s4UHWKWPVfl:s3VPF6yidtfjYJaj4UHoPV9","tlshash":"5672f01ac8501d422f80413072d1b00206ad0107efa8f8f9b7ac825f4f5d84fa1720ed","size":17045,"data":"","first_seen":"2026-05-11T00:12:51.188897Z","last_seen":"2026-07-23T10:00:42.570974Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/index-CA8j3SXS.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"7b87da2ce6df1752f0f9efaea1e9f04a","sha1":"d19936cf2c5acd2357a0767d933ff2162c1bd1e9","sha256":"bf1ab5f6af6fdd3e2ff5dc96fd3bf3f77df7571a2fbd946d0eff3a038d742afd","sha512":"5aa32f739e91e042c1176f79408829ca5b3fecaf0cd2c3d346a24e481c180e02dfb0c094f3829f057ad7c6c06e1a6b7c2ac1d2ad11f02b71320e224b04cef11a","ssdeep":"49152:kvc0AIt96kTRqw+qX4+Ui5B88dmwVK9Rucr4suVYjlmpsOFdHl924svSVHvHRrUQ:ws8j1J7qc","tlshash":"50e5d44477f624359263f0785e1fd804b228a40b164cdc6c7a9c92f49f895788bfafe9","size":3273555,"data":"","first_seen":"2026-05-11T00:12:51.15951Z","last_seen":"2026-07-23T10:00:42.572312Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"1d3dd92841ac4f8adfe356bb2a4288fe","sha1":"4a6021aa943b47d89092b2a3904bf6d9d59a0138","sha256":"d318ad2575dcf6fbc280568fae05d8f78398f197f66ec9d6475200f3c0fb0b68","sha512":"5173429abbc20fce6f2792b36e9056db7667647d55dbb5dcdad9fadc66f1d42ce83cf538ed58a77213e7efd00169e6af18a82ca097858de5907a876b71eb0835","ssdeep":"3072:t29T1gfxwUPVSjKV0VxWHgZakWqBhiXiolyyVRQAMdWYkCT8xAtIH:Y9T6nPVSjKV0VxWOjZpaAGH","tlshash":"17f3b559a7f324348227f07a1a1fd819b229a40b358eee547e8c42945f4953cc7f6bec","size":159993,"data":"","first_seen":"2026-05-11T00:12:51.146139Z","last_seen":"2026-07-23T10:00:42.476005Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/animations.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"15060533c6fa7eed8248e77508fc7690","sha1":"be41262d3d17e4645c49c4f6a9751113faad5c4b","sha256":"fe0722fc2331cc5b8219707a7368142b538209ce5cdc41675a5074aebd1ddbe3","sha512":"3cd1b3ab00355529253b36558f7de40db19b2d46fe9b2b31a52a954de6ec05bb3ef826c8b595dd967bd1b9e5f37e3ba879d2a05debeed190b6a6bf4fa3810d9c","ssdeep":"","tlshash":"ec6153d1a26c523f47ef12b7052c22db2f7c4023b46241aa3d75926c239edb883129f2","size":3199,"data":"","first_seen":"2026-05-11T00:12:50.927605Z","last_seen":"2026-07-23T10:00:42.524487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/w3m-modal-2A054F8N.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"b59ecec882d2d38282b3434ba9848eca","sha1":"2d1fdd834078c764badd65da93ff5213116f9eba","sha256":"cfa8634b3a87988c57e09bd5a5f4a0ed9b9860f3d1098716a46c3d3b91c03845","sha512":"40151a615ef0fc61055c3fdc74333e9657b71436ec0fc313efe59869036a94809b02414323b87b583690accecf1e00774f6cf2658d4a1f24a0e6737028724026","ssdeep":"192:RFp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPVd9By48xZWPSODUGzi:9cmwc7Gn7+X0xAxZ/6lYdUoO8d","tlshash":"ff02b754a7e3487d6523e29a2fdf8e602214a4071947ccbe72ec62d48f8417c1dbae72","size":8237,"data":"","first_seen":"2026-07-23T10:00:42.501393Z","last_seen":"2026-07-23T10:00:42.501393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/qualified-js-before","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5308695ec5621c5986587e5e032cad95","sha1":"242f9a0bb6803bc3b5c511182fbf384f4b42f132","sha256":"2ac237eab2715ec605db6e72b8da4bf79c4d6455a1dcf52537ab58666eb83a40","sha512":"f1eb051067e2c1abcf241b0f58fa8be863ceaf8b337b893b0b3eeeba027d91f865a4ad1016ce2d04a3b84b9771e047b0f04ab02fbab5e93bbcc7cb37a65d8a0c","ssdeep":"3:Hl/unwl/aGNsDkdFlHqCDOtPN/bUlrVbmoaT4LG9cN+Lc9N/9DdEiN/t8ZWIVAlj:2VQTqAOBNgewSeBNtdvy/Afl","tlshash":"2ea15bc9d4d141a610a76479675ff207de70120fe59d89417ceec344df310575a80d8e","size":5068,"data":"","first_seen":"2026-05-11T00:12:51.193966Z","last_seen":"2026-07-23T10:00:42.57329Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/template-content.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9d2f8d5dcd32df005d952344002fe3f","sha1":"16cd3abb3fe8b5d530ea15bf079d6acbc90f70f2","sha256":"227f4caf817093c32e1b3fe2e36fa6a7444dea08ad945abf9de8543c64291a61","sha512":"9d4d14038161b9d78dff0488de9802ccbb4a217e1baf315077c4228adc4ef4250ccea85cfc373acf524f63b96faf290f41a1ad3452798f860fab7da249f878ab","ssdeep":"","tlshash":"6001cbb9263c8e7807ba006eb52e2888e77982048b8446d5bc61077c24d05dd22fe24b","size":689,"data":"","first_seen":"2024-08-19T13:40:24.31065Z","last_seen":"2026-07-23T10:00:42.5486Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/inc/gtm.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a9de51bc9e9b1847d4d4ddea338bed3","sha1":"01120b8158167023c3758d5b3abfb9ee0115fbc5","sha256":"a54d55f6405bcaf31f896656adbb4d8ade825cece189a334bdd08576389ad358","sha512":"7ebf1502799d3aea404d9cd53ce4af851f1e584b229ab3e09a701bf536e700379b90c9fe240a081fbd62b0b2a557dca147cc05294ec48bb39171ecbae263fb65","ssdeep":"","tlshash":"3be028da74110c7170dd05f533b1a11d71432708a8091d22cdfdc9142c2c5c74c134cc","size":341,"data":"","first_seen":"2024-08-19T13:40:24.309421Z","last_seen":"2026-07-23T10:00:42.515345Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-xdpath.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c53a4289fb10d55ba40d4c9ad8a5e8a","sha1":"b7212c8432f6e0c9646882b4c719ce9f783d737e","sha256":"54deb8e1b0ca4909021ab1294fe37acae54f06c9d3438ce9e1480f11944e3e92","sha512":"deb153c5bda2708782f63af59ab6ea28b9a079ee6f75c4ec80691d62708a498e191f40173d5521984135ba73ed43ce86f8533ad721c2bb826dedde0e33bca506","ssdeep":"","tlshash":"b7b0124f4171f1ca46df075968f73444c5368b75253cb362bf89e850e41150a8333b4a","size":106,"data":"","first_seen":"2024-08-19T13:40:24.30481Z","last_seen":"2026-07-23T10:00:42.484206Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/TronConnectButton-4634Jm0S.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"6f1759208f4d89c9534df52aef10fbe6","sha1":"9665d8000160c7ff14d245115b5a2940284a97fb","sha256":"d77dbfc6e201f4ef532e097daddbaa463273eb73df82e357974c73db72a71a95","sha512":"35d607f9d0255afccca30f2981589466e9024f0a025f9105b499b69f69254b7a1810f537759ea44c0144ed1cca8d8e34d30ef2d68e7b273588d64780dc0e43de","ssdeep":"49152:46Xo8ulhXw2OL+//EI/qbdGwDWvS8c18ZAXTec6WxS6NhZTN23wPv1wG+6eeYIuE:28ajqbdr","tlshash":"2d7594047bf761224253f0b81f5bdc09b238950f519cdd49ba4c92f06f995788bbafa8","size":1684919,"data":"","first_seen":"2026-05-11T00:12:51.19068Z","last_seen":"2026-07-23T10:00:42.574398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c0d29d5ddc7e60c365db7a28fd27ccd","sha1":"7e6684c7edd68a5207248594a92c2391f590880c","sha256":"617cb3e97605e59d71815b19fd11fcbc87b0ac934115501acfaa8876b31322b3","sha512":"3194020258b4551888e2dd9ada54e9f74857ef16b1fbe2d29e6eea399e5713b63e049572305f9add535b11263e1045ed6b3f4651516ae39e4486de4db9e41417","ssdeep":"","tlshash":"34c080dff35c263036d72537b135c759353759559d195161641d84706108fcc03e7d1e","size":186,"data":"","first_seen":"2026-05-11T00:12:51.181789Z","last_seen":"2026-07-23T10:00:42.575272Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/transaltions-C-R9BBi2.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"a5434989cacfdb90097368c81e198048","sha1":"e04832a1f00ff4d9f03cd41f7e3137d97ee3b94a","sha256":"db1fef39c5c2d2043ec629846d92e2d87fd972bf8ffd2e2d857e6e348732c83f","sha512":"47075662ce3d9cdb1e0fadd1e7826cb76664674559e833b87142ce54d13fb3f4908f3599d3e6c350a22045ddaebf6e45f7ba37e6eed37003a20f28f570e878d0","ssdeep":"96:7RjG4bxGEBuaY74toSli21MaYMY6f2iq+M9EqgK:7RjyaY7+aAI+lqT","tlshash":"4da11db2c98d21641282550fcb577e1f20d604bf9f56733a37d009f57ba622b853b29e","size":5000,"data":"","first_seen":"2026-05-11T00:12:39.060797Z","last_seen":"2026-07-23T10:00:42.552249Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-style-control.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"345f7a071963a042d66b06080a694f0d","sha1":"251ec3a76cb8fc3c4bf37a90211ff6ae26d13174","sha256":"8bf3425d6a8c324dd31ecb63bf3fd559c78a2b2aae421122a3e3bd0ce65e1216","sha512":"6c584749e0d304198fc54c0d56f81ee7d7817de1dfddbabf06deadab3251e3f94763d943ee1d9a3cd0dbf73422f6b9a5d75eaf425685e833859a29ff24358959","ssdeep":"192:pcMSI757FyM4ubC42ss1TQOvWsgh9nj8EEudhdWd12TpC0Slx/pCIiSIZ:pcHKf1kTFWsgh9IUdhUd0A0S//p6SK","tlshash":"583286c5e3ad217a0a7611ee98ae52cf77bc913a960008dabc99547810e4c7e12bcf75","size":11626,"data":"","first_seen":"2026-05-11T00:12:50.98093Z","last_seen":"2026-07-23T10:00:42.485259Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-load.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d270c42436d5d5459d787ad8e080f510","sha1":"b0e2ddb11bdb4b94532ed9d963b4d860398da112","sha256":"e617a60ed16d80725bdb72e98fe016a08b3d2c1714d1c9715362a3dd0ce3104d","sha512":"c6437b95979087b8aa6abe5632de7d824cbd7eb11c2b48fbc6ba76ef071eed894eb9d391c1035fa03deda4f43eba5db0d5ddfbb0894fcaabe11ba08711807263","ssdeep":"","tlshash":"b361644da9ba501835532dab9acf1bc1366852371278ced0358d17304fb5cb864b9bf8","size":3192,"data":"","first_seen":"2026-05-11T00:12:50.930765Z","last_seen":"2026-07-23T10:00:42.502659Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"a15fe7941ba23b8d0734538bb1ce61d9","sha1":"f36ca4620c7e1ef83082c4958636a39cd3b3d197","sha256":"3c2a1dee5ba565dbaa524639316ff994eebc18a02bac193e00f8f39d40d3f322","sha512":"135abed72c017c2e729424bdbe665c359848d38da61271325a5095f0b1ed87fa2d27f0616989b2538e5a52088e6c6c6fa684694c82b17a8493fdfc2fb89a8fc1","ssdeep":"","tlshash":"47b02b543023a420211505ed003c43462560893fd3468040818005281fe808c1289d51","size":120,"data":"","first_seen":"2024-08-19T13:40:24.382842Z","last_seen":"2026-07-23T10:00:42.576158Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"f87cb9003200699968d5cd8dbe23eccb","sha1":"49f11dfa09026054eaed616f38966d2fe5363151","sha256":"8c9bbcb22f21c6e55e99a51eb9d79c110bd287231cdb4d36e7dfd4ab3c898ee1","sha512":"5a72555cfba3002a45c4b5e1365daa6dcd0bd0d050ca8921a4a1128e052327462218fe362c419e14e70353cd3060ce5855c0ff865772a1ffeaa3e5981cbaf29c","ssdeep":"","tlshash":"3ed0226db180aec2732e200032ee0c62249e9b500fc1a9646110f2d3467a80841a0f64","size":196,"data":"","first_seen":"2025-05-22T11:21:51.387117Z","last_seen":"2026-07-23T10:00:42.577073Z","times_seen":2984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-23T10:11:38.266333Z","times_seen":16840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"8cb1c9d4acb4adf44a68825a78fd5676","sha1":"dc8dc1d0b4e62aba17a5826d96fa1b59042e07d6","sha256":"34b70e6b22745c74a7437e5640084ce65b716c5ee2070fb698f4f8ea615f18c2","sha512":"bba5cc037646664d7ea7197790545af72a81c97acc92c1ad3cce6e03d257318b3257de51dd8f56ba9bd60ec7b7fc924607fe14c2b65973a070720fc3e64b87eb","ssdeep":"","tlshash":"f3a0018bb6d1b088ab61a13511276215a13e49a25519b0a1718ea3a13622597a192db8","size":73,"data":"","first_seen":"2024-11-22T19:36:32.359594Z","last_seen":"2026-07-23T10:00:42.577588Z","times_seen":2061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"5629986dfc9beff973d64235c364fe59","sha1":"179a77f8b9b23f7d74828db3b45fbadf977bce8b","sha256":"2798ad0f7be0f8f69811796f83989d2ad20fa43c1d4bc4c9d9ac01c0dc8bb8ad","sha512":"b15633356a556845eca1c133837e0f5237659e9b4e6ae2c41cb3825cc38ea2ae64f805a4cc39bb3f0e251d2058f4b38a06aaf171d47e9c9b2a70b1a1b41e8659","ssdeep":"","tlshash":"4bd0a96eb180a9a2721e300a33ae0c62189f8b100ac1aa60b150f293467a80446b5f28","size":214,"data":"","first_seen":"2025-06-13T07:09:13.949956Z","last_seen":"2026-07-23T10:00:42.57804Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-munchkin.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd30bf3e826a8ebe232346fcc10a911b","sha1":"de7e36fad73f152767dc139ff161bdb955bc7beb","sha256":"0a2307098af436b653de86b4ed590a90b5ad55a0d62411940d0d69f4edf45514","sha512":"5300dadb07401a94d3c188e791b757b0bf5edee8feb97cf3b210f17aa769c57727a7ccf7f1ea0451ef9e40d203c4ac709c1c1175bb56aa02edac8c28a5f07388","ssdeep":"","tlshash":"0df0c00e19df1136e42832090f5f923835f1c8a506219d44e80cddc85d20e3cda2ee09","size":538,"data":"","first_seen":"2024-08-19T13:40:24.305402Z","last_seen":"2026-07-23T10:00:42.522404Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/index-DikFRP7M.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"f17fc008cd8c1422406cc883da2b7c02","sha1":"6faca0c8c767adf8de0393a47fc7e738f0ab5769","sha256":"04f057d10f59523601b217b75f6877420c684820409284ef3fdf2585266d831f","sha512":"7a70720f2c8ee081d88bfa6c52baf27535068ff043a58175f6d6ee80cdb78ee23a4582a19da585143e2a77ab5ec7c3902fb9bfab02ddedd420f90e97192d867c","ssdeep":"96:SevI0l5aeVwWYF1ToTS2qNMnOlLWuAndTPkQ0MPTmXVaRu:zdl5X6zTouxE6LWuAd7kQtTmlac","tlshash":"469123a627fb55744197a15c0a1fd825e124408fa908d8ad3fcc52f08f8d62a8efbfd4","size":4444,"data":"","first_seen":"2026-05-11T00:12:51.100381Z","last_seen":"2026-07-23T10:00:42.559171Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/node_modules/swiper/swiper-bundle.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"21762a1ce0a6bbe2429b882da03c2af8","sha1":"68610169735a53fc0c3af9c9d48a7e806d68d5db","sha256":"7353aab4a6c28ee552655a5ab9aa0c3f3537bfa12813c922f68ba1505a5aebd5","sha512":"c16fbd3b739bfe9c8e0e5af479d043ec5e0e369da6aa3f03cb3231df7b80dfcc47f809ae4684d4a06ba4ac15e1a78ecc0368599a86d18ab80bf9c07e4371be77","ssdeep":"3072:+cxTC015fd0Nl6rgDVFaqG7QPNdzW3Ptw46k5d/QQh/eFyEZ:+sC0LsPN05d/QQh/eFyEZ","tlshash":"d1741d0c11b3212501a3796e5faf8405727a9103784ade543e9c8f18efb993856febf9","size":342061,"data":"","first_seen":"2024-09-24T10:50:58Z","last_seen":"2026-07-23T10:00:42.560758Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/ConenctComponent-DQbBmkC7.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"498f4a5bf4e9202f83591e2ee2bd5305","sha1":"f0834651cc42f3ca35d06c2246ce8f5ae3e5bbf7","sha256":"e3d4df7b55e224c639c26b12f96030cf2a21681c5c56582ecb84d7adb2d7f427","sha512":"047394c3c276a9d79f8d9acde48350bab9728bd0acc19bc45c73946f37123aeb9d88e20db4860273eab187f91411687e3ffc99da44bcf51eaf5543488ed6e99f","ssdeep":"3072:wLzaruKCMnUwUCjnVL2A8nxiLk/tlxKpOrKVExdGwyRQiQF:wLzWHBnUwUCjnVL2Bnx6SxKpOrKVKdGw","tlshash":"4904954a3af721b21253b0791e0bd441f225e54b219dcc587e9c42f46f46a78cbf6fa8","size":189072,"data":"","first_seen":"2026-05-11T00:12:51.136864Z","last_seen":"2026-07-23T10:00:42.487499Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/node_modules/@lottiefiles/dotlottie-web/dist/index.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2feff604cdbc357c56fd0bbcae7ae1a3","sha1":"21c35177bf147102c28c92f962a9c08f01167942","sha256":"323b3d431eb0db981a9c5d5886419c530d75fa16d5635d3d9cfd1a5ce6e784f9","sha512":"bf463172b7dd41b936c74006ba433b7d2a27c46426d3ce81cfc4c277f34a4827e7aab7524ab1dee7352e9a1791f8ef71f1ecd688b62349edb84b2cf1df745490","ssdeep":"6144:/IZXGvTgmxDPDSgYlAuUkFFgnkmrsH4+g5it6zMR/:18","tlshash":"be9414a273881ba6e54809e94164e20bd4f6d02e342525cdebf6b797f43d5a2fc1c3b4","size":438755,"data":"","first_seen":"2026-07-23T10:00:42.527609Z","last_seen":"2026-07-23T10:00:42.527609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/abstract-signer-Dn-4idyj.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"7e66cabcb045a44375b5d2b735c59f5f","sha1":"dd550cf5262fcb93e5564823dea31598a979a771","sha256":"76ac1072e766308f9a92ef81ed5ae6a3ea952723ebec6875544cf667405881de","sha512":"e520524fc67f2e7d2800c81530bd53b3b0a06dc4f9a4b6b4833bd83e5ae93ded102ad6c004365c1631fb2b7c19994ee8f7a987bea4a0ba2a8f0b8809dcf6f7f3","ssdeep":"6144:ETMakL12KGHO+QQwKJWD7dumDC13ALs7ue0:yo+O+NALs7ue0","tlshash":"d12496443af361f24213e0b82b0bd445f629e55f229dcc58ba5c82f46f45a38c7f5ea9","size":220554,"data":"","first_seen":"2026-05-11T00:12:39.021977Z","last_seen":"2026-07-23T10:00:42.45478Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-23T10:11:38.271577Z","times_seen":16962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/dist/main.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a328b33fb8d272c9b9177b5e8724bd3c","sha1":"354dd836687b8e493ce189fdf94b98462ed0365f","sha256":"2cabc6ceac4efdf1fb1edba76e033ea06fa8ec8f09d3199d8663a2f54c14cfe9","sha512":"55b12887297854730d6ee8e8414b57971fe945a6019d24210f47b495ee44405f92ffb7fde5df01cbe540666fca7dc44ff026c2be318900ee671263e52cb5dc50","ssdeep":"12288:Qb3ENvukmxgtUnfTtz0MG5747GKqiRrowoXYzuDOfxX++4bW9bJzGXYcuW9zT:QbaukmxgtUnfTtz0MGp4bCjuml","tlshash":"f115f988b5a1f0b506e362e5406f450af27b6d29701e9590e261f8e4bcbc9ce9137f3d","size":914669,"data":"","first_seen":"2026-05-11T00:12:51.078304Z","last_seen":"2026-07-23T10:00:42.446462Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"log","text":"blocked cookie __q_domainTest=1; path=/; domain=chainsalyisis.com; sameSite=lax","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj95 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[connect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj97 class:Function displayName:Zs/W\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:135 line:3862 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] connected:map[configurable:true enumerable:true value:false writable:true] disconnect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj98 class:Function displayName:Zs/D\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:38 line:3878 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] publicKey:map[configurable:true enumerable:true value:map[type:null] writable:true] select:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj96 class:Function displayName:eo/S\u003c extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:32 line:3970 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[w] sealed:false type:object] writable:true] wallet:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[connect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj103 class:Function displayName:Zs/W\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:135 line:3862 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] connected:map[configurable:true enumerable:true value:false writable:true] disconnect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj104 class:Function displayName:Zs/D\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:38 line:3878 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] publicKey:map[configurable:true enumerable:true value:map[type:null] writable:true] select:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj102 class:Function displayName:eo/S\u003c extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:32 line:3970 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[w] sealed:false type:object] writable:true] wallet:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[connect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj107 class:Function displayName:Zs/W\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:135 line:3862 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] connected:map[configurable:true enumerable:true value:false writable:true] disconnect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj108 class:Function displayName:Zs/D\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:38 line:3878 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] publicKey:map[configurable:true enumerable:true value:map[type:null] writable:true] select:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj106 class:Function displayName:eo/S\u003c extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:32 line:3970 url:https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs] ownPropertyLength:2 parameterNames:[w] sealed:false type:object] writable:true] wallet:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#20Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38},{"level":"debug","text":"New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#34Loading chunk 478 failed: (error: https://js-agent.newrelic.com/nr-spa-1.310.1.min.js)","filename":"https://chainsalyisis.com/","line_number":718,"column_number":38}]},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-548V83L","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.740Z","timestamp":1784800784740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtm.js?id=GTM-548V83L HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 23 Jul 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172878\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530478,"size_decoded":173508,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24862)","md5":"044e50ee150f80bc2f79501306b64e1a","sha1":"a9d90df0b9146c3c31d5987f3144b16aaa42ed7a","sha256":"e159e36a35fbc2237952923208c98fa50f08c8a3d5025955680c8226850c96e1","sha512":"65820dd577b04696977c4e3ff652f9767773bcf8881acc861498f5d5aec6072e5fa0ff1a74e955d968f97044cca04a5d57450adb8315557694a8fb7b88fdbfac","ssdeep":"6144:k62Uu8yc1+hI0t9RlGYYwqY5T+cMz9d0C3TnHZI+OY0ft:k62Uu93MVkV","tlshash":"1fb409cdb3da74715393a4b8903f018ba57a28e2f45cd899f089cce42e746994263f7d","first_seen":"2026-07-23T10:00:42.441591Z","last_seen":"2026-07-23T10:00:42.441591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/mulish-regular.woff2","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.748Z","timestamp":1784800784748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/mulish-regular.woff2 HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.974Z","timestamp":1784800786974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\ncf-ray: a1f9d5969834b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 76926\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Fri, 23 Jul 2027 09:59:46 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=291+0 c=1+5 v=2026.7.0 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":3670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-07-23T10:00:42.443568Z","times_seen":1402,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/variables.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.078Z","timestamp":1784800784078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/variables.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 290\r\nlast-modified: Thu, 07 May 2026 20:31:48 GMT\r\netag: \"69fcf6b4-122\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":290,"size_decoded":638,"mime_type":"text/css","magic":"ASCII text","md5":"9512e2efaf4b87f461bdc50c45942a89","sha1":"247f8754e845911f2844603d9bd9d9af3b08cf53","sha256":"09b5c98cbe2b39ab3646c95a61d55f404c3289c581f1076088ff3db70d804ed0","sha512":"0c903ca22d4ba45673064cfedd77373751fc60cf424251a458c96d590c7870e1b541700bd0afb5c7e79c39a01c2315932ab3457a4f140e940610d257123109e0","ssdeep":"","tlshash":"24d08c0e3f81a0c5033d68a4e4773aa0d205883e411864ee81922a6b39c969ac0da34a","first_seen":"2026-05-11T00:12:51.148099Z","last_seen":"2026-07-23T10:00:42.444216Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/01/logo-coinbase-1.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.166Z","timestamp":1784800784166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/logo-coinbase-1.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:26:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf592-e6b\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3691,"size_decoded":1986,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1a590c949b54837d7ef55c1025edb5b","sha1":"febb839f79f8d8c0bc7225f874750da75d5cfeef","sha256":"b7bcb0971c87fdf3c0bd67ffd819c4bb8b1cf99fb9f5826b1e4d670294912b22","sha512":"a3dbc489d8a0849e4b8b09dacce4f9222d08d024e0fd5141a8d664b1630da296b37cb7f6760b15799c72350732b7a3719eb470cde0f2bff6d7a9e8cf9d698be9","ssdeep":"","tlshash":"697176e07feba2f4970293b7d917a9b57a6f38f73342a1b5c270ec44251726444c48a0","first_seen":"2026-03-06T10:03:01.17617Z","last_seen":"2026-07-23T10:00:42.445255Z","times_seen":5,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/dist/main.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.217Z","timestamp":1784800784217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/dist/main.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf69d-df4ed\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":914669,"size_decoded":239249,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a328b33fb8d272c9b9177b5e8724bd3c","sha1":"354dd836687b8e493ce189fdf94b98462ed0365f","sha256":"2cabc6ceac4efdf1fb1edba76e033ea06fa8ec8f09d3199d8663a2f54c14cfe9","sha512":"55b12887297854730d6ee8e8414b57971fe945a6019d24210f47b495ee44405f92ffb7fde5df01cbe540666fca7dc44ff026c2be318900ee671263e52cb5dc50","ssdeep":"12288:Qb3ENvukmxgtUnfTtz0MG5747GKqiRrowoXYzuDOfxX++4bW9bJzGXYcuW9zT:QbaukmxgtUnfTtz0MGp4bCjuml","tlshash":"f115f988b5a1f0b506e362e5406f450af27b6d29701e9590e261f8e4bcbc9ce9137f3d","first_seen":"2026-05-11T00:12:51.078304Z","last_seen":"2026-07-23T10:00:42.446462Z","times_seen":3,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/favicon.ico","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.609Z","timestamp":1784800786609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=df6e039a-96b6-477f-83e1-b63c6d6f7459; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 07 May 2026 20:20:37 GMT\r\netag: \"69fcf415-3aee\"\r\nexpires: Fri, 23 Jul 2027 09:59:46 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":15441,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a0b5fe83c90de4528f38fc12f4b3818d","sha1":"d1b9525b464058c708e8f3e0d20e12bd341a4bf5","sha256":"c52a6903f965fd63222aa446d05be3851285c1cd37fa5d8865a9079d269c3e18","sha512":"e3ed7efadbcf45ac6dfad4854b025437207a0d0f60793df0f3a1d9090f28e562a7b024a71f885ba63f4bb5e7a3440da05211d3ef523fccd122ff8ceefdba0ebe","ssdeep":"96:jiweTxaTRkIBQcyrvhLMLSDmCsa8/TZrdFEh5ynLH3CuEUOJ13yOV0Rlt:jirNN1zhL1mC8/TREh23qUOd8r","tlshash":"8462dd22b505646ecf90077dc4afd95767f0bc06721d2a733b82bfb638ab1109847345","first_seen":"2023-11-05T10:27:35Z","last_seen":"2026-07-23T10:00:42.44774Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.972Z","timestamp":1784800786972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 09:59:46 GMT\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-23T12:41:40.577337Z","times_seen":36369,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_open?customer=1f6af024-d72f-427c-ac88-91db3d7de6d1\u0026current_page=https%3A%2F%2Fchainsalyisis.com%2F\u0026policy_name=GDPR\u0026action=non_open","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T10:00:06.529Z","timestamp":1784800806529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /save_open?customer=1f6af024-d72f-427c-ac88-91db3d7de6d1\u0026current_page=https%3A%2F%2Fchainsalyisis.com%2F\u0026policy_name=GDPR\u0026action=non_open HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Thu, 23 Jul 2026 10:00:06 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fb0991a0cdc083e8b3d013da8a2e9954.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: ZVP2xb5uZiafmJEGPCLzgZcE1aPIQ2BsORpYjQhkvPzIwXKYM728kA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":669,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-23T12:44:46.63335Z","times_seen":748054,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/typography.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.082Z","timestamp":1784800784082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/typography.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b3-1b2c\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6956,"size_decoded":1564,"mime_type":"text/css","magic":"ASCII text, with very long lines (6955)","md5":"7e7477c9f3425138c7be16aaa1cbc1d8","sha1":"78f9939a3861b6cf1578289a3c9f579f5baed3dc","sha256":"b3fb59a8385d1d2128dc977ebe7962cf5488c36699d502e50e7541d88673bdcf","sha512":"7fd02a99fccf63873b3fccb8b97ea0ab74b1064313cf057bae9fb6303bf050d7b9d62938dee83a79022a9290eebd11586c13776fc2ae6424a3ab8637f1f947ca","ssdeep":"48:4s85mliwb85vwa+lrXBCi/8SHPIl468Q2LStIjl/p/a/rbijtZNNBrIoYQCeCCeV:rBnX1Q28/HcPHrEQir/","tlshash":"b0e188a1633cda04a3be8839e1147d6ca026d935cb1da6fe55c2470d48c97fd43b978e","first_seen":"2026-05-11T00:12:50.877282Z","last_seen":"2026-07-23T10:00:42.450084Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-css/site-header/site-header.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.089Z","timestamp":1784800784089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-css/site-header/site-header.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6a3-2dc6\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11718,"size_decoded":3007,"mime_type":"text/css","magic":"ASCII text, with very long lines (11717)","md5":"a87d409261e0dc55b83d4869bdeaeafc","sha1":"41f95ad1e49e90a7631d5d0f18014c8a32bf545b","sha256":"ecc3f6a2a3d77b583aba2d915bed796738d9e928648e97cfdd31896cfedd5889","sha512":"fdf43e3530b8bf87d6c2b8662fcf48926465ed6123fe141306ce7691c3a59d5fd8957516f43c0d20935ae151a268583c83d82ff7a851e7661904539b41bbd822","ssdeep":"192:hGUBQU5QTiTTlbpLcad9kubCD0bXwulGSpuOTj:hGUBQmQOPlbpLcafp3LwX6P","tlshash":"1b3245c3f2543a242273837ee2ecee285a6d5006d74b06e955e9c21f8fcd79252e2f45","first_seen":"2026-05-11T00:12:51.087239Z","last_seen":"2026-07-23T10:00:42.451307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124","fqdn":"js.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.096Z","timestamp":1784800784096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"GET /qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124 HTTP/1.1\r\nHost: js.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=60, public, stale-while-revalidate=60, stale-if-error=300, s-maxage=86400\r\ncontent-encoding: gzip\r\netag: W/\"a011cba1941e759e114114187595547f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept,Accept-Encoding\r\nx-cache: miss\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-envoy-upstream-service-time: 61\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: de2967e5-1986-43e0-8153-bb9c125bf842\r\nx-runtime: 0.047041\r\nx-xss-protection: 0\r\nset-cookie: __cflb=0H28uxcrVnMGuZKc8nszHWEuyjt8ZUsWS6zYK2giSYT; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:44 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a1f9d584cdbb2678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":427611,"size_decoded":120945,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65372)","md5":"12675ac278b18189819fcbc928b59e39","sha1":"8ef30206ec80e0ac392e0e70e19a0eae4206058d","sha256":"992f5feb7c743c9317b7db8a30270a8f1932d078559c3a3d00e93c4456d6b25c","sha512":"36e37fafc25ac9a43dd70df54d67f86fa36e96069145bd30b035102c8a0adf9cd7109057c3c6ca06057ef5e6410c37e699ecb5b1330cd4399e93bbc0d48ca654","ssdeep":"6144:SdkOD+zvfsZwMAFuYiOi51m1onqhQZyM9S+Jd5sfdTmj33TU9:tfsZwQ07q5cP","tlshash":"3b944c877356747203dbc19298365103f3397658280c846cfaacdddaa758d89b2b3f7a","first_seen":"2026-07-23T10:00:42.452593Z","last_seen":"2026-07-23T10:00:42.452593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":5,"connect":4,"send":0,"wait":46,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2024/10/bny-logo-2024.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.172Z","timestamp":1784800784172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/bny-logo-2024.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:28:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf5d0-4cd\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1229,"size_decoded":962,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ec596ba7675ac4a60bd9655cb8bc605","sha1":"9fadbe1608faabbe9ae0b4e51a38d49bce883262","sha256":"e625a111bf3c7e5628a315fb766f01cf1712ea16cf2f155b916ad3eb578a329a","sha512":"d64b12170bc37ba01964abdeb6359d0da69a5c830867fdfeeddcf31025ceccebf438b94f5688af4bb7db8782658a587515bf6441ecaedda2ce4084fb8000fd81","ssdeep":"","tlshash":"eb2132e533ccd1f8b11897510687b13f401b28e42d69e1a59a916a357d6b48f0d39ec1","first_seen":"2026-03-06T10:03:01.169777Z","last_seen":"2026-07-23T10:00:42.453647Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/abstract-signer-Dn-4idyj.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.245Z","timestamp":1784800786245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/abstract-signer-Dn-4idyj.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/ConenctComponent-DQbBmkC7.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c4-35d8a\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220554,"size_decoded":60513,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (575)","md5":"7e66cabcb045a44375b5d2b735c59f5f","sha1":"dd550cf5262fcb93e5564823dea31598a979a771","sha256":"76ac1072e766308f9a92ef81ed5ae6a3ea952723ebec6875544cf667405881de","sha512":"e520524fc67f2e7d2800c81530bd53b3b0a06dc4f9a4b6b4833bd83e5ae93ded102ad6c004365c1631fb2b7c19994ee8f7a987bea4a0ba2a8f0b8809dcf6f7f3","ssdeep":"6144:ETMakL12KGHO+QQwKJWD7dumDC13ALs7ue0:yo+O+NALs7ue0","tlshash":"d12496443af361f24213e0b82b0bd445f629e55f229dcc58ba5c82f46f45a38c7f5ea9","first_seen":"2026-05-11T00:12:39.021977Z","last_seen":"2026-07-23T10:00:42.45478Z","times_seen":4,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apivin1.pro/user/metadata","fqdn":"apivin1.pro","domain":"apivin1.pro","tld":"pro"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.455Z","timestamp":1784800786455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apivin1.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 19:58:48 GMT","end":"Sun, 04 Oct 2026 19:58:47 GMT"},"fingerprint":{"sha1":"3F:9D:B7:49:88:9E:60:30:AC:D1:7E:5F:E9:9D:1B:89:BD:68:08:41","sha256":"7B:F7:8E:33:A1:63:D6:8B:C7:7E:3C:80:8F:AF:5F:DC:87:8C:79:19:5A:23:41:A7:1A:0D:36:DB:86:2C:78:B0"}}},"request":{"raw":"OPTIONS /user/metadata HTTP/1.1\r\nHost: apivin1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":302,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":140,"connect":61,"send":0,"wait":63,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/static/icon-512x512.png","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.608Z","timestamp":1784800786608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/static/icon-512x512.png HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=df6e039a-96b6-477f-83e1-b63c6d6f7459; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 67990\r\nlast-modified: Thu, 07 May 2026 20:31:39 GMT\r\netag: \"69fcf6ab-10996\"\r\nexpires: Fri, 23 Jul 2027 09:59:46 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":67990,"size_decoded":68343,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"bfbc55ad0661990c769296c65eb90315","sha1":"7d471cf06a548a52347f3f5aec30da1cadaf0f95","sha256":"979929bb36123709ae85c59daa217bd8d3ad0a21b310bba5be513065c6267ec5","sha512":"4697d6600e014a825eabda8ff280bbdca60468af469d1f2689fa9f8c382b425d4c8ced6b02a54617c11c268c528dcab1c5d340ce78eed313ce7c1666525d7f97","ssdeep":"1536:RsDj363vOmfh9yifDmmuW+pwnAzoOpwIWjDOJT+Y:qj3y2mfsW+2A8emDOJT9","tlshash":"8463028a2501d86d9df893470b5b87f9d7b6e5b9ab210998f689c0f888f701c49dcf34","first_seen":"2024-08-19T13:40:24.32503Z","last_seen":"2026-07-23T10:00:42.45671Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-includes/js/jquery/jquery.min.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.093Z","timestamp":1784800784093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c8-15601\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":87553,"size_decoded":30789,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-23T12:45:39.036205Z","times_seen":987026,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/swiper.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.116Z","timestamp":1784800784116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/swiper.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b6-66c\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1644,"size_decoded":760,"mime_type":"text/css","magic":"ASCII text, with very long lines (1643)","md5":"23d353c76ac56680db08dbf9fa2b0cd7","sha1":"20252475dfc57caf8657a7b5060ff5980ca28159","sha256":"1d559951dc8ee0a6bad16498556a58ddecaf8e3e4c702303ec85d54631344b0a","sha512":"2985c003878221ceb3f6eb4316c8033b527933f85b360ed06338b6af4833989f2643aec453888ecbe74d438f414dd93c67229a497b54b6b59bb7fc898958a917","ssdeep":"","tlshash":"b831339123f6065a87ab4f6749a15531332ac88286533380c6d3fe20c7f88b1177fe5e","first_seen":"2026-05-11T00:12:51.067702Z","last_seen":"2026-07-23T10:00:42.458823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/home-page-header-2-3000x1638-1-1500x819.avif","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.164Z","timestamp":1784800784164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/home-page-header-2-3000x1638-1-1500x819.avif HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 17445\r\netag: \"6972555f-4425\"\r\nlast-modified: Thu, 22 Jan 2026 16:50:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-7ffbcf568d-v2rp8\r\nx-styx-req-id: 2cfb5e68-8679-11f1-92e3-cedbae9c3512\r\nx-served-by: cache-chi-kmdw8640047-CHI, cache-bma-essb1270026-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.254868,VS0,VE212\r\nage: 0\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e2f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17445,"size_decoded":18206,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"774fb51f73f2bbd5aa123b5405a3b08d","sha1":"4088983e4ff17f77a1865ee28a76656fc9cfd2d6","sha256":"fe59c5337532b7b25cc2f4ac93fa49f520c665eff07641351f72dcbec099d221","sha512":"1e313c9aaf3ee0e9708b11de9bd2c19114387079d8bed327da36e41bf9c770ca0a7b8eff09a7014ec44ae4a4d717e99c8250d6109fe80504a276082ddcd56258","ssdeep":"384:J+v8PqweXU6Th2EdJlyb4XfSnxPyAaaaEreACxX79YtQ:E8P0tvxtMPyAaauXBeQ","tlshash":"3b72d000797d3a7adae8a37082d7d6234238d838e055186abf257e27a04f5b89170d53","first_seen":"2026-05-11T00:12:51.141709Z","last_seen":"2026-07-23T10:00:42.459984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":43,"connect":13,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_open?customer=1f6af024-d72f-427c-ac88-91db3d7de6d1\u0026current_page=https%3A%2F%2Fchainsalyisis.com%2F\u0026policy_name=GDPR\u0026action=non_open","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T10:00:05.370Z","timestamp":1784800805370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /save_open?customer=1f6af024-d72f-427c-ac88-91db3d7de6d1\u0026current_page=https%3A%2F%2Fchainsalyisis.com%2F\u0026policy_name=GDPR\u0026action=non_open HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Thu, 23 Jul 2026 10:00:05 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fb0991a0cdc083e8b3d013da8a2e9954.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: xjemj1LkjLjjnl20p-9hYmGOQzSMmCAAkUDVi3qnL_zOtfMxVPJnfw==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":669,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-23T12:44:46.63335Z","times_seen":748054,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/logos/logos.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.105Z","timestamp":1784800784105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/logos/logos.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 790\r\nlast-modified: Thu, 07 May 2026 20:31:47 GMT\r\netag: \"69fcf6b3-316\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":790,"size_decoded":1138,"mime_type":"text/css","magic":"ASCII text, with very long lines (789)","md5":"8cf7d80bb8b33b24361c04dd3aa4eb65","sha1":"709fffbb701982978ada3d32f999495b2eba35e0","sha256":"bf2dd225df4b5e0cd9084376a0a646af891cafa6dbec62223b7be7f702b9fd0a","sha512":"f71f4d6930798a671aa31e5628189af3afe64391f86a1f1c63b4fe7c29d6f2650e3909275921c1cf81dc073e4df7146b529142008419a2491998ac86c360378c","ssdeep":"","tlshash":"ed01f96d81bd1e0fa7af8958f42f361b8ac190d4c60f5ce8d35d867aa2cb20109a5898","first_seen":"2026-05-11T00:12:51.036135Z","last_seen":"2026-07-23T10:00:42.461122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/index-CA8j3SXS.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.750Z","timestamp":1784800784750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/index-CA8j3SXS.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/integration.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c3-31f353\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3273555,"size_decoded":793552,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (949)","md5":"2126686231a391790cc5fd6c9f177ea9","sha1":"b0823c4ccc66eb88fa3433158cd93e1a4602364d","sha256":"aae84251f155cf636d64dca056766d21f12a78151e0330f1670a50fc6c07f544","sha512":"639259dda51dc30583cff086aec9a8c517051fbcee90f088ca125c5c6910744de2dfa04264dd12da464283544d876993449b17473be232093102fed5076d52b0","ssdeep":"6144:5T9blyn6Epp2uRfXO7/Zvc9pz7YDkgTLJ0A74bmCgDmbTa7CU2hqvS6v//S7o+W0:9KRvOZ0AImCNa2iS6kTRqw+qbz4Fm","tlshash":"ee25b54976f621218253f0395e1fd8457238a90b1a8cec597a9c92b46f4843ccbf6fed","first_seen":"2026-05-11T00:12:51.133859Z","last_seen":"2026-07-23T10:00:42.46228Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.qualified.com/w/1/o1RPkDjgCZhS1uqU/visitor_events?wu=","fqdn":"app.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.957Z","timestamp":1784800784957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"OPTIONS /w/1/o1RPkDjgCZhS1uqU/visitor_events?wu= HTTP/1.1\r\nHost: app.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: bypass\r\nx-envoy-upstream-service-time: 2\r\nset-cookie: __cflb=0H28uxcrVnMGuZKc8nszHWEuyjt8ZUsWS6zYK2giSYT; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:45 GMT\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1f9d589fa01712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":551,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/chainalysis-bold-webfont.woff","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.997Z","timestamp":1784800784997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/chainalysis-bold-webfont.woff HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026projectId=7bbb65bc98212e6aba038aac8f98ff74","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.67.109.71","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.764Z","timestamp":1784800785764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026projectId=7bbb65bc98212e6aba038aac8f98ff74 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 1322\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 31914345-b9e0-4564-b739-b697e5eb3fed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1322,"size_decoded":1663,"mime_type":"application/json","magic":"JSON text data","md5":"4a6d7375d98ebf362bb8697fb214ff6e","sha1":"26cdc19e3f09187e8b91edf76fce529395848104","sha256":"e2659bf63f6b426e3436a25c7751c5c91bf5c93621e124b37530a8ae0a9295bb","sha512":"ba4126d97946322037ee22b71d626a6006e66bb022cf8ea3ec146d35a08e1b1efc9fd00806c02c20a343e8b618580e22760b159f6173925d5283dd1c4e16357c","ssdeep":"","tlshash":"8c21868d84800c40ecb4d398dbfce8cbc06ef01399cd289959f81cb045bd6b3365236a","first_seen":"2026-07-22T16:32:42.334653Z","last_seen":"2026-07-23T10:00:42.463555Z","times_seen":3,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":6,"connect":23,"send":0,"wait":42,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/home-alterya.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.186Z","timestamp":1784800784186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/home-alterya.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18194\r\ncache-control: max-age=31622400\r\netag: \"6961ac33-4712\"\r\nexpires: Sun, 28 Mar 2027 22:14:05 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-69c5cff8b9-pq5nk\r\nx-styx-req-id: 44741681-2a2a-11f1-8706-8289d30b85bb\r\nx-served-by: cache-chi-kigq8000158-CHI, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.254559,VS0,VE5\r\nage: 81670\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e334c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]}],"data":{"size":18194,"size_decoded":19029,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b8db0e80861b19240f413c12b3720a3","sha1":"9ab504042769d8eb68ef86526d8fe71600519305","sha256":"7fc799c13625073e6ebda9e4d9fa8894b49fa475a1917409bc726e672e2128d6","sha512":"b21380668aea0083e6e6048d2f03098cb1e6f20709c573943f920a5b24394a08cbb5a05ff7a528b23a294866ba64a5b8f9036aa0ada924fcb0d37fed5c2c3ee6","ssdeep":"384:A4gQU7O4jCO3BzBfBpNlGGaOloovHcX4+XUNKUsfKyW1qF:pU7O4j13BzBfFlmOloovHcX4+sKUcF","tlshash":"8182cf0fb6ebb84ce83142732dc9f5b46e7d09b42920f934d9c19c09766de649d160ee","first_seen":"2026-05-11T00:12:50.97481Z","last_seen":"2026-07-23T10:00:42.464153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/css/marketo-styles.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.067Z","timestamp":1784800784067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/chainalysis-marketo/css/marketo-styles.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:23:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4cc-124c\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4684,"size_decoded":1759,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4678)","md5":"324fd9df1e0793b061f26523d39c51f5","sha1":"00581b67e03596c934a64e82dc2b8130d0df11ed","sha256":"0e9c5e96b39cfdb72db383e1f83acda5680f38dad3d0bc0231d588b07753cc52","sha512":"bf5e0dae421702b43c8f1b29db23847050fda1121a80ff5ae635a870d22faf6401598e1329b7a07f3546e154ee51e3774599d85eb785ff7a24c5e1379ffff095","ssdeep":"96:wISN7oYs/1jKLH9iI9W3khkN5+Qa13ZpT5JGWL6oShJSsqJ3JY7f4aknZ:wISN7oL/1jKLdz2khkN5+Qa13ZpN8ou6","tlshash":"a7a1dc9ad55ce07a211b54a2dcf613daeb2fc23ee53936fa86eb6c7085a604d0433744","first_seen":"2026-05-11T00:12:51.112047Z","last_seen":"2026-07-23T10:00:42.465229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/utilities.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.087Z","timestamp":1784800784087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/utilities.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b8-39f1\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14833,"size_decoded":2642,"mime_type":"text/css","magic":"ASCII text","md5":"94bc3aabb18938773c6ab1d089ae02be","sha1":"41ca087422287ae74c063ea5a7494c6b371b6bb8","sha256":"6f371cca40f7cf32fe24ce397291573ed87cbdd7f3dd049c8b79a767b839a782","sha512":"35888957658bdc5575201f5b2dc110b803122be79c6ae1b7ebcc4cdfe225a4f37ec23a3cc788b98111d28701a3cb2e9fe08f226283b49a6442f7d99487e4459a","ssdeep":"192:0nm+EZq1edh0L5u7fr/3p8vO3WFj5pbvFV8C599OAr:0wuvO3WFjXDbBx","tlshash":"be62ed619af1a2bd277e9278e11b7058f32df050cb0d7ad6e9c811990cc47fc91a2b9d","first_seen":"2026-05-11T00:12:50.966929Z","last_seen":"2026-07-23T10:00:42.466365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/bloglist/bloglist.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.112Z","timestamp":1784800784112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/bloglist/bloglist.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 400\r\nlast-modified: Thu, 07 May 2026 20:31:46 GMT\r\netag: \"69fcf6b2-190\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":400,"size_decoded":748,"mime_type":"text/css","magic":"ASCII text, with very long lines (399)","md5":"f5e6e0b4b1cf805d7151aee4d5f515fc","sha1":"e484c9d6317edb3d26a7c024ccd8060fb97dead7","sha256":"b48de39204bea874c1c21541e5ce14096e97ad2f7840e69f897e45692c7c3685","sha512":"7fdb592043885f5297581046aa5cfb1048a5b26c447a1f39dd78dd021990815bbe9d1c0a1ecc6d7ea36f9c528e2fc7bac9eca7f7ef508cea3534e723e793e79a","ssdeep":"","tlshash":"81e0ed6cc27020eeb50d9852f34b113e464036a0c02189c5db2bbc84ac9536e3581f0e","first_seen":"2026-05-11T00:12:51.000276Z","last_seen":"2026-07-23T10:00:42.467395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.121Z","timestamp":1784800784121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a1f9d584df5fb517-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 166683\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\nlast-modified: Mon, 04 May 2026 22:25:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:S0lp+k7zWUMk2ixteM6HZvu8L9Eh//OVrt+ZfbCpmgY=:\r\nfly-request-id: 01KQAXJ3FPVDE7QQ3S4TZK9NQ7-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":10737,"size_decoded":5144,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-23T10:11:38.271577Z","times_seen":16962,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2022/11/icon-youtube-lightblue.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.395Z","timestamp":1784800784395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/icon-youtube-lightblue.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 713\r\nlast-modified: Thu, 07 May 2026 20:23:48 GMT\r\netag: \"69fcf4d4-2c9\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":713,"size_decoded":1066,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22091182e1dd9eb8161e4b72f5246239","sha1":"3afda003e70d64af7440380f2ab27ca1c4a56f5d","sha256":"428576d46141c30f1871919085755759be4359d6fe6707851fbbcc37b388c31f","sha512":"4a17ca127b31711a51923a63b16cd5b80778c2112a0961a14a2d5c89f9b9688fee5f3e9c47cf0c4b5d0ff5f137306dd5379c4659c4751d5d712bbb942777c950","ssdeep":"","tlshash":"ef01c0cc87c8525cd1166348e617b279355e30b634f7c6a081ce7a23c92c4dd5d1c1b7","first_seen":"2024-08-19T13:40:24.32955Z","last_seen":"2026-07-23T10:00:42.469163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/shared.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.319Z","timestamp":1784800785319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/shared.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b7-2a67\"\r\nexpires: Fri, 23 Jul 2027 09:59:45 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10855,"size_decoded":3611,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3153f92056b804d8de4f40de698e79ec","sha1":"78dd041ddded2382464706c6030e1e20619cd36a","sha256":"5daf5a2b96b94acd9908fef0aa762fe91fa680ad0fd68c7e0c3d93c6c9d40246","sha512":"f86167f4cae7d98c93824877b55a0ce1f920f882d9b4a6e6742b5c4e2d3be38aaac100a9a494cb58c061734f9f2275f6caecffff64b894a7e77d2aac86210f62","ssdeep":"192:2I63tpRPWQA7gLa2b2WbmANmu2BKDgiHw27WMUyqNF3JGBFhNxOHFLpAJIqE/Mu:J6JrbpdNb2j15H5pAOqw","tlshash":"9822b65b227130364d77107b879b2241b62480577203e859799fcba90f829785b7bfeb","first_seen":"2026-05-11T00:12:50.982045Z","last_seen":"2026-07-23T10:00:42.470188Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/buttons.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.084Z","timestamp":1784800784084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/buttons.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b7-2daf\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11695,"size_decoded":1596,"mime_type":"text/css","magic":"ASCII text","md5":"10169e94cb5fa7d63b3d33f9c663d5b8","sha1":"560c915d2f3022b4b0b31b182a44aaa3e6369fd3","sha256":"1f38d8dc08cc03a9448afbe9762e4046885a0d5e5da85c92528606acc21ca609","sha512":"3b710d5653c396bba5ddca64e8052d261f058ba149d6169a7078371279517aa9558b095cf6a60744090b26967508470074eb112df1d9bde97bd4a3bee6b8f76e","ssdeep":"192:8qfdol3ikHkbWt6TQT8BSvLmQy6sQMOWCST:8Q","tlshash":"bb327c51b1b19f3d93e9463ef1976c4c237cd847ca19b2c0e5e58aa404c0bae4257ee7","first_seen":"2026-05-11T00:12:51.043588Z","last_seen":"2026-07-23T10:00:42.47181Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/01/logo-moonpay-1.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.176Z","timestamp":1784800784176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/logo-moonpay-1.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:26:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf58c-264f\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9807,"size_decoded":4571,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74d2375b789be2bdf411f59d32a97c0d","sha1":"45a9cf2508e6d2c70f7673e5c8fd8cb0422e2c96","sha256":"a228a09196b9f59990a741f3f1956cd128c96467a1ff7da8cf6179ee06bc75f4","sha512":"afdb9a138887605612deeee7a87e305ef864ca7f6088c01b713655bcc9addca1f0802997ce9394726be7d029270c8296d32c6863281f629871f72d64d7a1a312","ssdeep":"192:0ucoXwNbY7bf/X9T1oOHEK1Q4eTY3ARAicBT1h1otmumOv9Qbzp:0OIY7bnNpHkK1Q4e83ARVcBat5D2d","tlshash":"9e1296efa7d5b3d4e482e3f6e92155767a4a30ff6bc5cf54c369ae80b64209c4848c84","first_seen":"2026-03-06T10:03:01.171125Z","last_seen":"2026-07-23T10:00:42.473247Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/TronConnectButton-4634Jm0S.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.893Z","timestamp":1784800785893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/TronConnectButton-4634Jm0S.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4b5-19b5b7\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1684919,"size_decoded":373598,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (664)","md5":"7536b67dd48b7e2298443aaeb0d849ff","sha1":"2c239a62ef42be4f937cd5cf9762e1d99b447a24","sha256":"e35905eaa2179e75cd66f1b1f531ed85405c8d9a6caad3dc6831eb1736ae63a1","sha512":"a5f6f05503ebde2994753261646e2dd6bdf6a7865af606927609678f10209b203d0f9c1a4dc51134181963c7cb8de2e1ef0a3c06faf45c08bddf0bc2b7b8ad82","ssdeep":"24576:46Xo8ulhXw2OL+//EwW4/qbdGwDWvS8c18ZAXTec6WA:46Xo8ulhXw2OL+//EI/qbdGwDWvS8c1k","tlshash":"6f25a3086bf721324217f0795a1fdc05b238981b219ddd4dba9c92f86f4853887f6ee9","first_seen":"2026-05-11T00:12:51.005297Z","last_seen":"2026-07-23T10:00:42.474434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.945Z","timestamp":1784800785945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/SolanaConnectComponent-uxHEgwR3.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4bb-270f9\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":159993,"size_decoded":43563,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (490)","md5":"1d3dd92841ac4f8adfe356bb2a4288fe","sha1":"4a6021aa943b47d89092b2a3904bf6d9d59a0138","sha256":"d318ad2575dcf6fbc280568fae05d8f78398f197f66ec9d6475200f3c0fb0b68","sha512":"5173429abbc20fce6f2792b36e9056db7667647d55dbb5dcdad9fadc66f1d42ce83cf538ed58a77213e7efd00169e6af18a82ca097858de5907a876b71eb0835","ssdeep":"3072:t29T1gfxwUPVSjKV0VxWHgZakWqBhiXiolyyVRQAMdWYkCT8xAtIH:Y9T6nPVSjKV0VxWOjZpaAGH","tlshash":"17f3b559a7f324348227f07a1a1fd819b229a40b358eee547e8c42945f4953cc7f6bec","first_seen":"2026-05-11T00:12:51.146139Z","last_seen":"2026-07-23T10:00:42.476005Z","times_seen":3,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.qualified.com/w/1/o1RPkDjgCZhS1uqU/sentry/proxy","fqdn":"app.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.978Z","timestamp":1784800785978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"OPTIONS /w/1/o1RPkDjgCZhS1uqU/sentry/proxy HTTP/1.1\r\nHost: app.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-sentry-url\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: x-sentry-url\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: bypass\r\nx-envoy-upstream-service-time: 1\r\nset-cookie: __cflb=0H28uxcrVnMGuZKc8nszHWEuyjt8ZUsWSGhDKqWD3oy; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:46 GMT\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1f9d590592c712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-860366224\u0026cx=c\u0026gtm=4e6331","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.055Z","timestamp":1784800784055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=AW-860366224\u0026cx=c\u0026gtm=4e6331 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 23 Jul 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156961\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455863,"size_decoded":157591,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5422)","md5":"4b0e6c3cf58a74646a082ebb05326e98","sha1":"94dc59759fb556a4d24641b7357cf01891a7681f","sha256":"0e40510031d0c8a4b5028ef3dbe7bc8e781b91c51130e23f050ec3fffd57b8c1","sha512":"6cfb827bf208c6ce7931e20b189890cf826b268ef3fe8fbdbbb75523ea35ca4131782bd16c1e103397ee40d7e924717b05b9c58fe633b814a51f9924ad568a36","ssdeep":"6144:05vQU0jNo7P69FMxmRkqn0hdBScPmfxNf3Ej+x+GawoXt5:05vdYqP69V3KqxiwOt5","tlshash":"e8a419cdb3d670629396f478503f018ba57a28e2f448c899f189dce42e7465a8277f7c","first_seen":"2026-07-23T10:00:42.477035Z","last_seen":"2026-07-23T10:00:42.477035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":41,"receive":40,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/static/images/modal-close-icon-text-gray.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.208Z","timestamp":1784800784208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/static/images/modal-close-icon-text-gray.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 274\r\nlast-modified: Thu, 07 May 2026 20:31:37 GMT\r\netag: \"69fcf6a9-112\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":274,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5050a4bf963d2a480cf2e58ac79c1160","sha1":"d575d9de2df442353881275a7b6e1a3fafbbd85f","sha256":"25644cc462dc46c0545c7df725c4786251ef4176dd121fcf8a41f19ad3fe33c0","sha512":"1ffba311b7587bb3fe5fa17a062b422b4dc42fcfaa356e470c0afe47d376ecdceacf042516ec2f2b8d37223079015755e0b8daa72a1092490590a6e297938edc","ssdeep":"","tlshash":"6cd02b66a218a434a5710244d3a4706c10ff507542cd2158ad003138e80ccdfacbf9fd","first_seen":"2026-05-11T00:12:51.02854Z","last_seen":"2026-07-23T10:00:42.478169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2023/03/icon-telegram-lightblue.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.396Z","timestamp":1784800784396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/icon-telegram-lightblue.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 634\r\nlast-modified: Thu, 07 May 2026 20:28:34 GMT\r\netag: \"69fcf5f2-27a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4283fc9681ed234762c7ad71f7d8dd95","sha1":"a5595bd6715e7063f2ae54684437f4c8cccf3c44","sha256":"5a63295e118d9bf83e25c0f518ec39a41d94532e82baa6a972a0209a62be88e9","sha512":"4a635342d237511de89331ffc9c994114013f9c2140af4c48de973be765c31149b7847fe79881c4b9f2263709ea66c47a529cff7958a4909e9e69ca313848d87","ssdeep":"","tlshash":"28f0491a8154daf96e44813cd764bd5860c758d7707097e8fed70246d5480d6f89c3e8","first_seen":"2024-08-19T13:40:24.330253Z","last_seen":"2026-07-23T10:00:42.47924Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/insert-classic-template-code.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.786Z","timestamp":1784800785786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-js/template-content/insert-classic-template-code.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/template-content.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/site-header/site-header.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.222Z","timestamp":1784800784222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-js/site-header/site-header.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6ae-2874\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10356,"size_decoded":2555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"472486dd327ac9d6b1e2624dba84b378","sha1":"489263f8a948cd881d3b4f7c70aca3113835807f","sha256":"b60fafb23ae9481a885f486238f87ed1f3933282e829b10e510c834d9ee2c844","sha512":"de9b9c062e3d023507e0ae5850cf0003e5c47ef6da0a386dba35aced97b75fc3506a76e861dd1c71f04457e900bcab028c2cddd0fd6f72286630d7d5bf07f77a","ssdeep":"192:xq212Xs+O3NR7AzjiHmzjpz62bdIN5Tkc2vm+eW8wEhPc:xq212XsN3NCXzJIjFpO","tlshash":"1022307a9d72253204f7c5dae3cfa944f62000076145c9693aedc7092fc1da269fabf9","first_seen":"2026-05-11T00:12:51.00137Z","last_seen":"2026-07-23T10:00:42.480322Z","times_seen":3,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.qualified.com/w/1/o1RPkDjgCZhS1uqU/sentry/proxy","fqdn":"app.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.975Z","timestamp":1784800785975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"POST /w/1/o1RPkDjgCZhS1uqU/sentry/proxy HTTP/1.1\r\nHost: app.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nX-Sentry-URL: https://o209747.ingest.us.sentry.io/api/6666957/envelope/?sentry_key=242e9ed9349440feaad9f6f49ec89269\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.119.1\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3478\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3478,"data":"{\"event_id\":\"e05b1b53413f485c8884e9e0f9dc2085\",\"sent_at\":\"2026-07-23T09:59:45.970Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.119.1\"},\"trace\":{\"environment\":\"production\",\"release\":\"5724f835629e4f097ec1016c0dc2c4d3ac7b3e14\",\"public_key\":\"242e9ed9349440feaad9f6f49ec89269\",\"trace_id\":\"111cc590fc964de3976c3f2bdc64eaeb\"}}\n{\"type\":\"event\"}\n{\"exception\":{\"values\":[{\"type\":\"Error\",\"value\":\"Qualified: invalid domain. Could not find a domain for chainsalyisis.com\",\"stacktrace\":{\"frames\":[{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"?\",\"in_app\":true,\"lineno\":11,\"colno\":3},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"?\",\"in_app\":true,\"lineno\":10,\"colno\":4},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"1325/init/window[t]\",\"in_app\":true,\"lineno\":4,\"colno\":154532},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"execute\",\"in_app\":true,\"lineno\":4,\"colno\":155234},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"initialize\",\"in_app\":true,\"lineno\":4,\"colno\":180783},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"E\",\"in_app\":true,\"lineno\":4,\"colno\":372210},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"d\",\"in_app\":true,\"lineno\":4,\"colno\":369641},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"1325/eb/initialize/\u003c\",\"in_app\":true,\"lineno\":4,\"colno\":180868},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"async*9776/s\u003c/n.value\",\"in_app\":true,\"lineno\":4,\"colno\":355344},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"init\",\"in_app\":true,\"lineno\":4,\"colno\":309237},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"resolve\",\"in_app\":true,\"lineno\":4,\"colno\":237839},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"np\",\"in_app\":true,\"lineno\":4,\"colno\":304133},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"createOldState\",\"in_app\":true,\"lineno\":4,\"colno\":303486},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"update\",\"in_app\":true,\"lineno\":4,\"colno\":290530},{\"filename\":\"https://js.qualified.com/qualified.js?token=o1RPkDjgCZhS1uqU\u0026ver=20240124\",\"function\":\"get cookieDomain\",\"in_app\":true,\"lineno\":4,\"colno\":289944}]},\"mechanism\":{\"type\":\"generic\",\"handled\":true}}]},\"level\":\"error\",\"platform\":\"javascript\",\"request\":{\"url\":\"https://chainsalyisis.com/\",\"headers\":{\"User-Agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"event_id\":\"e05b1b53413f485c8884e9e0f9dc2085\",\"timestamp\":1784800785.969,\"environment\":\"production\",\"release\":\"5724f835629e4f097ec1016c0dc2c4d3ac7b3e14\",\"sdk\":{\"integrations\":[\"LinkedErrors\",\"Dedupe\",\"InboundFilters\",\"HttpContext\",\"FunctionToString\"],\"name\":\"sentry.javascript.browser\",\"version\":\"7.119.1\",\"packages\":[{\"name\":\"npm:@sentry/browser\",\"version\":\"7.119.1\"}]},\"contexts\":{\"trace\":{\"trace_id\":\"111cc590fc964de3976c3f2bdc64eaeb\",\"span_id\":\"b485fd59b3e3b21b\"}}}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/json\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\naccess-control-max-age: 7200\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"75177ebbcd3192a374095378c0a19598\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding,origin, access-control-request-method, access-control-request-headers, Accept-Encoding, Origin\r\nvia: 1.1 google\r\nx-cache: bypass\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-envoy-upstream-service-time: 41\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: b6feb13d-1e54-4ba4-9f0b-07a34c71301a\r\nx-runtime: 0.038740\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28uxcrVnMGuZKc8nszHWEuyjt8ZUsWSSPtLeKhf5V; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:46 GMT\r\ncf-ray: a1f9d5924b08712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":1268,"mime_type":"application/json","magic":"JSON text data","md5":"d4b305b8075dbca586707cb100d0a885","sha1":"bdbac9b0d28b43625eaf860282b52a344c9680cb","sha256":"75177ebbcd3192a374095378c0a19598c9d802f6dee31310ae0eb50084ffe190","sha512":"7adae1daab26ae5b4120c79b33caf34c87afdbd1a12bd345d821bcc62a6a0e9bb05d916dbc7857357d1233c3661e7776620861cfcc2dc1b7cd0985002109baac","ssdeep":"","tlshash":"8b90044f474c10144c5010715f1740f4d00c0403d7c11cc404c00cc45037770cc4d017","first_seen":"2026-07-23T10:00:42.481545Z","last_seen":"2026-07-23T10:00:42.481545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/mulish-bold.woff","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.252Z","timestamp":1784800786252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/mulish-bold.woff HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/textmedia/textmedia.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.110Z","timestamp":1784800784110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/textmedia/textmedia.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 593\r\nlast-modified: Thu, 07 May 2026 20:31:57 GMT\r\netag: \"69fcf6bd-251\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":593,"size_decoded":941,"mime_type":"text/css","magic":"ASCII text, with very long lines (592)","md5":"3af5fa4eaf7f715e518f78062dae7f24","sha1":"2f38a43d5a72151ac74fa5634ca4bd0ab5e4bf29","sha256":"1b971cc92d6c25ea76d51672d9abee6d4fa75a70d91f241e8fe177d29de1a66f","sha512":"8b364827efd8e9e14736f0b8884a0d09c8f93663ccccc79056931a245b45533c7f6333ca0f9565517de61ea74df20bad36154c113455ea3a52666597377b3e99","ssdeep":"","tlshash":"c1f0e1417be9123974afc56c64d976e67b526c13d695ebeb9d09f1a0858c6c03032e02","first_seen":"2026-05-11T00:12:50.9699Z","last_seen":"2026-07-23T10:00:42.482588Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.123Z","timestamp":1784800784123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a1f9d584df60b517-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 333779\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\nlast-modified: Thu, 14 May 2026 12:08:02 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:IXWO0ITNDjfnNXIu5POVfqlgYoop36bDzhodR6LW5Pc=:\r\nfly-request-id: 01KR251DE5MQTF4HT3N0DRXGT1-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131882,"size_decoded":43853,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-23T10:11:38.266333Z","times_seen":16840,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-xdpath.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.211Z","timestamp":1784800784211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/chainalysis-marketo/js/marketo-xdpath.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 106\r\nlast-modified: Thu, 07 May 2026 20:23:41 GMT\r\netag: \"69fcf4cd-6a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106,"size_decoded":467,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"4c53a4289fb10d55ba40d4c9ad8a5e8a","sha1":"b7212c8432f6e0c9646882b4c719ce9f783d737e","sha256":"54deb8e1b0ca4909021ab1294fe37acae54f06c9d3438ce9e1480f11944e3e92","sha512":"deb153c5bda2708782f63af59ab6ea28b9a079ee6f75c4ec80691d62708a498e191f40173d5521984135ba73ed43ce86f8533ad721c2bb826dedde0e33bca506","ssdeep":"","tlshash":"b7b0124f4171f1ca46df075968f73444c5368b75253cb362bf89e850e41150a8333b4a","first_seen":"2024-08-19T13:40:24.30481Z","last_seen":"2026-07-23T10:00:42.484206Z","times_seen":4,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-style-control.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.214Z","timestamp":1784800784214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/chainalysis-marketo/js/marketo-style-control.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4cd-2d6a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11626,"size_decoded":4321,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"345f7a071963a042d66b06080a694f0d","sha1":"251ec3a76cb8fc3c4bf37a90211ff6ae26d13174","sha256":"8bf3425d6a8c324dd31ecb63bf3fd559c78a2b2aae421122a3e3bd0ce65e1216","sha512":"6c584749e0d304198fc54c0d56f81ee7d7817de1dfddbabf06deadab3251e3f94763d943ee1d9a3cd0dbf73422f6b9a5d75eaf425685e833859a29ff24358959","ssdeep":"192:pcMSI757FyM4ubC42ss1TQOvWsgh9nj8EEudhdWd12TpC0Slx/pCIiSIZ:pcHKf1kTFWsgh9IUdhUd0A0S//p6SK","tlshash":"583286c5e3ad217a0a7611ee98ae52cf77bc913a960008dabc99547810e4c7e12bcf75","first_seen":"2026-05-11T00:12:50.98093Z","last_seen":"2026-07-23T10:00:42.485259Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/images/arrow-down-bk.png","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.771Z","timestamp":1784800784771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /images/arrow-down-bk.png HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-consumer-brands.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.205Z","timestamp":1784800784205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-consumer-brands.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50700\r\ncache-control: max-age=31622400\r\netag: \"6961ac39-c60c\"\r\nexpires: Sun, 06 Jun 2027 07:29:54 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-5fbd9fdf97-4nlxd\r\nx-styx-req-id: 58b2129f-60b0-11f1-9fb8-6edbbdf93ce1\r\nx-served-by: cache-chi-kigq8000070-CHI, cache-bma-essb1270023-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.252671,VS0,VE6\r\nage: 150866\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e414c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":50700,"size_decoded":51536,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72d0fd972ea5a290fc88b289c1925484","sha1":"af7dc7c337ec050b4ce3df932d8d9bb4a6e726b0","sha256":"6dfbfbe2bcfb1520d1689aaea9c1ec31e61ed483ea1cd9a0065159de8f3c0aa8","sha512":"94dedfba74ec6b9912e2155daf0bf46639b6f050d7b48c3e40afb55a8232400e0453c250d156df0e092ffd18ab6a74fc95a2f4c0cb84aa3536352603869efe93","ssdeep":"1536:uu64fHHP7S9//bQDUmW5JkFscfM58Rj69QTi:XPfm2DjEkFXa8Re9Qm","tlshash":"d633026898fa305508332565177267b8bc47ddad04dfac9c43c20abb6c2d5e73ade680","first_seen":"2026-05-11T00:12:50.911432Z","last_seen":"2026-07-23T10:00:42.486413Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/ConenctComponent-DQbBmkC7.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.948Z","timestamp":1784800785948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/ConenctComponent-DQbBmkC7.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4b7-2e290\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189072,"size_decoded":49436,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"498f4a5bf4e9202f83591e2ee2bd5305","sha1":"f0834651cc42f3ca35d06c2246ce8f5ae3e5bbf7","sha256":"e3d4df7b55e224c639c26b12f96030cf2a21681c5c56582ecb84d7adb2d7f427","sha512":"047394c3c276a9d79f8d9acde48350bab9728bd0acc19bc45c73946f37123aeb9d88e20db4860273eab187f91411687e3ffc99da44bcf51eaf5543488ed6e99f","ssdeep":"3072:wLzaruKCMnUwUCjnVL2A8nxiLk/tlxKpOrKVExdGwyRQiQF:wLzWHBnUwUCjnVL2Bnx6SxKpOrKVKdGw","tlshash":"4904954a3af721b21253b0791e0bd441f225e54b219dcc587e9c42f46f46a78cbf6fa8","first_seen":"2026-05-11T00:12:51.136864Z","last_seen":"2026-07-23T10:00:42.487499Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/icons.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.085Z","timestamp":1784800784085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/icons.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 74\r\nlast-modified: Thu, 07 May 2026 20:31:52 GMT\r\netag: \"69fcf6b8-4a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":74,"size_decoded":420,"mime_type":"text/css","magic":"ASCII text","md5":"e9c9732fbe6e173abd9282a2ec98dfb3","sha1":"7013c060b223bc90b495747f266a51009e01840b","sha256":"05bea32cde9cda15ec0a8ded188995b8b5d87085894b36bcdeede762ad8dcecf","sha512":"6799ed853c8a24325bd515accc328fb402d39f7db5eb19a0b4daae4086ffab95f69cb4a1b2d888a683574249a6825ecf4599270804be26e31183f20061e59103","ssdeep":"","tlshash":"99a011a02000800c8b3a0a2ac28ab080b00888b0ce88a0b28282020b80a83ac280802a","first_seen":"2026-05-11T00:12:50.960095Z","last_seen":"2026-07-23T10:00:42.48862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.402Z","timestamp":1784800784402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2780\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 23 Jul 2026 03:54:23 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e813bb2fe72a7a317b92ea146f692ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 85028\r\nx-amz-cf-id: 6lYMwYr9fG-e4gMjbjvBFjwFDOJZKs6Vj-C7pG4hiZHYQ1vu5ch0lA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3306,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-23T10:00:42.489731Z","times_seen":22113,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":32,"connect":33,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/wc-dotlottie.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.756Z","timestamp":1784800784756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/wc-dotlottie.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b5-1515\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5397,"size_decoded":2211,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8f9dafc49f3d451cf108eb9d3e7d5c3a","sha1":"bd1df971f2dafca21b45379c7f23459ffb57063f","sha256":"3758e831a87f7e44fe7ff45986e5508f0395c36a4f723393173a96bdd7efc344","sha512":"c6f476b2c11d07130a2c4cadf9139f9bd534d97529f4a5b74afd6cf87c5c89373e3d88e6f4267d1c0f32568e0eaaad32010d27d36c47602c8dc13a77d81cdcb6","ssdeep":"96:KR8nts4Ojr3iteQNBONRv4CDG24SIGe75Tq+KyZ2Dcu7gTYBXLgy:wosHPikEQjvR4SIG0E+XQcRYr","tlshash":"afb110c2fb6d172f87f92062cd1c61d96b7d8c77691186be3d2c53a91148d298361cb2","first_seen":"2026-05-11T00:12:51.040426Z","last_seen":"2026-07-23T10:00:42.490429Z","times_seen":3,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/grid.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.080Z","timestamp":1784800784080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/grid.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b5-93a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2362,"size_decoded":929,"mime_type":"text/css","magic":"ASCII text, with very long lines (2361)","md5":"008074b8b25566c4038779ce32ff26d2","sha1":"708946b131dc39b9e60977de8512d05f1ddfc097","sha256":"7a3ccb02449e0360684b34faa1f9ddf6ad9d70fdd6e110c78fa8bde467648c47","sha512":"fdac77af84fabfbb58403afb4f1db05b9b587e47427cfa68dc03cccc715f1686773f1ef57abbafa25f2bf2b9df59ac748f607516901ed80ee645a90aadea29ae","ssdeep":"","tlshash":"4b41fce1186c9f555bfec038c1543a09812ac439ca1921ea79c18b4e15ce3fe16feb9e","first_seen":"2026-05-11T00:12:50.991698Z","last_seen":"2026-07-23T10:00:42.491645Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/dotlottie.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.108Z","timestamp":1784800784108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/dotlottie.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 131\r\nlast-modified: Thu, 07 May 2026 20:31:50 GMT\r\netag: \"69fcf6b6-83\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":131,"size_decoded":478,"mime_type":"text/css","magic":"ASCII text","md5":"1a7900281314cd1c6fd6f290b5b6b741","sha1":"c843a60e99a4e66630574150d0591b20b5192945","sha256":"2b396dd8209255abded0acf789bddd7b1c1f3f90ece12800981fe24006ce9c6c","sha512":"e8d715000946ae3286ac9face8cc8feac15f3f8ddb7aecf36096269f4eb81b19479db1961e24c998c6b0c8f5899421d46a0150208ba0c37dd62f1c3baaa308a1","ssdeep":"","tlshash":"a3c09b7d3e28c39c06f5c438c9c5778fd32880155b5511ea8ee1d3742dcd16c0aa61c7","first_seen":"2026-05-11T00:12:50.972386Z","last_seen":"2026-07-23T10:00:42.493146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/modal/modal-wc.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.753Z","timestamp":1784800784753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/modal/modal-wc.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6bb-1e9a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7834,"size_decoded":2905,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"375d31961c38e0f72edffd22a7c8a00d","sha1":"470471a4dd23451631ae9a43ca98e49bd95bab0a","sha256":"2a5fe3924d25cdcddff875f6d42e9c2c8f9df9a830bc044c82c275f92af046bf","sha512":"436dc281f35f4d0fbf708df94f597f4ee9896892306ecb92cd96d52d27000a9757171dbefda788d505bd655fa4fa54b520c79eaa2a2a19d4469d369f635dfc94","ssdeep":"192:WQ3/J4kvC0FRSy35+2iWygyQ+C5GGd6pAV65hC/yI1qMCj5uX7oO+4ztY+f6nb:WgKfUPLyQd5GGSUqMCjuEJ2N6b","tlshash":"0af141d2a7fc713e12ae015b66e519c9777c84b6d0112e6fbca8ddfc22c09584368db2","first_seen":"2026-05-11T00:12:50.925834Z","last_seen":"2026-07-23T10:00:42.494219Z","times_seen":3,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.qualified.com/fonts/Inter-Regular.f1f0c35b.woff2","fqdn":"assets.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.061Z","timestamp":1784800784061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"GET /fonts/Inter-Regular.f1f0c35b.woff2 HTTP/1.1\r\nHost: assets.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Last-Modified, Cache-Control, Expires, CF-Cache-Status, CF-Ray\r\naccess-control-max-age: 3600\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: RHYD30ABB4JDQQYC\r\nx-amz-id-2: X3Qc8/5+ScEGo5rqXDX36TPyNYd1RfqmenMIu+vjGU0yvdTCZR8kjC4je9nRfmA0HizGcJ1xeNA=\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: gzip\r\ncf-ray: a1f9d5849cc2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":825,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"e3747dc68d287f52afe9a66bf1390627","sha1":"19adae363fe20a2135d2960d3a5d93021c654d20","sha256":"4a3dcb9edc3619a431ccdc72198084331334c644df18890f426d44b4f2704981","sha512":"5a45192ac2ae634ca60ef0f9d465bcc5d37a6ab2cd6742cc03961060ab03476f14b295952afe9ae4971a9d90bcebb7704da0fef90b3b4af19eb243147cacc82d","ssdeep":"","tlshash":"c7d09722f388082a0a200977a3bbf630ab046a3011c002b20e93b4ab5b82c434c78220","first_seen":"2026-07-23T10:00:42.495334Z","last_seen":"2026-07-23T10:00:42.495334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":302,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/cards/cards.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.107Z","timestamp":1784800784107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/cards/cards.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b1-15e0\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5600,"size_decoded":1663,"mime_type":"text/css","magic":"ASCII text","md5":"478c63669dd978ff184f4c652da48b1f","sha1":"be834201c6a53459301f3f858333d30a91f40833","sha256":"08cedf47b02d25de525a0478c7271444b27a369ff4ecf8b53ffc7a24dc96cd76","sha512":"002c80c3d432dc0836b4160757acff1594dbd48c0553035b959c88da07c097cc14c1640c4f36207f762df545c3be9d568cc40fc63f3a74ea3f46602a93b89346","ssdeep":"96:4re8wCsqAdChq+U81QwnPnIy4KYN/miElp2BUXxGA4EaWTPCuaI3yJrA10y9StSx:iDcAE+U81JPIy4KYN/E2BUUA4EaWT6ut","tlshash":"8bc1105827f03ed6d6e7985a8bce72f263093520cf9e967d5289641ccf8c2e8417369c","first_seen":"2026-05-11T00:12:50.973641Z","last_seen":"2026-07-23T10:00:42.496804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2022/09/cryptodotcom-logo-soft.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.174Z","timestamp":1784800784174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/cryptodotcom-logo-soft.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:23:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4d9-11e8\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4584,"size_decoded":2066,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f224254a59d31c94465fd0815c02e903","sha1":"b360653ecd70d0f0d9ed7eb6e4a8fa4c83542941","sha256":"7ac23d51b08c6ba824a06600578d557b869ba27dc657a6eb1eed3e9ed715e608","sha512":"f6dbeb17eb6cd6ead993ab4ebc62daf15982f87e0bce18b55e2b3b609249ba5b7c4c2ed90b7731df2e46426ab68f335b2fc5034e7132ace81dcbb7fb72ef1597","ssdeep":"96:Lq9DjqgdNQqi5AKlT1ceoPS0dUCr8d13qVHi1KhazTTs/t:G9DjjdNHinF1r6US7ha/TC","tlshash":"dd910fcfa7dc65b4d80087e9503b61b5282f25ed3ea0da54478d3f9abf5245e89488c2","first_seen":"2026-03-06T10:03:01.180225Z","last_seen":"2026-07-23T10:00:42.498067Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-law-enforcement-1.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.195Z","timestamp":1784800784195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-law-enforcement-1.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31108\r\ncache-control: max-age=31622400\r\netag: \"6961ac3a-7984\"\r\nexpires: Mon, 11 Jan 2027 01:45:09 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-b-657b4465f5-2t2zx\r\nx-styx-req-id: ff7a5612-edc5-11f0-b416-72916ede88ce\r\nx-served-by: cache-chi-kigq8000179-CHI, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.253379,VS0,VE3\r\nage: 27231\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e4a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31108,"size_decoded":31944,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8816c4ee5b3c51e6d58a0fd342d6f71","sha1":"09694b496f9bdc749976a8cccd57861f7ded9c2f","sha256":"eff33f44e8b62c6ef2bf9703f9daad288c089072664fafdc29bd042818982551","sha512":"17172e091807e5a1668170e18c445fcc756cafd192c8147564d20a9391fca8e449692f6c56c482c8d30c6b51ebb99f3569e25812ee5a9a805a4d73e62a4fdd88","ssdeep":"768:h7T4gMh0C4UherbIRG9KQbhx/FZCJ58BD1aZafWrpqiQY:hg4U0IRG9KQb7ra8tEIudqrY","tlshash":"afd2f17df32835e9eea0441cf73cb92badd4e11d176efa22796a0ac25b0063d7412469","first_seen":"2026-05-11T00:12:50.986666Z","last_seen":"2026-07-23T10:00:42.500065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/mulish-bold.woff2","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.056Z","timestamp":1784800786056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/mulish-bold.woff2 HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/w3m-modal-2A054F8N.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.887Z","timestamp":1784800786887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/w3m-modal-2A054F8N.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=df6e039a-96b6-477f-83e1-b63c6d6f7459; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c0-202d\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8237,"size_decoded":3068,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (674)","md5":"b59ecec882d2d38282b3434ba9848eca","sha1":"2d1fdd834078c764badd65da93ff5213116f9eba","sha256":"cfa8634b3a87988c57e09bd5a5f4a0ed9b9860f3d1098716a46c3d3b91c03845","sha512":"40151a615ef0fc61055c3fdc74333e9657b71436ec0fc313efe59869036a94809b02414323b87b583690accecf1e00774f6cf2658d4a1f24a0e6737028724026","ssdeep":"192:RFp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPVd9By48xZWPSODUGzi:9cmwc7Gn7+X0xAxZ/6lYdUoO8d","tlshash":"ff02b754a7e3487d6523e29a2fdf8e602214a4071947ccbe72ec62d48f8417c1dbae72","first_seen":"2026-07-23T10:00:42.501393Z","last_seen":"2026-07-23T10:00:42.501393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-load.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.216Z","timestamp":1784800784216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/chainalysis-marketo/js/marketo-load.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4cd-c78\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3192,"size_decoded":1407,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d270c42436d5d5459d787ad8e080f510","sha1":"b0e2ddb11bdb4b94532ed9d963b4d860398da112","sha256":"e617a60ed16d80725bdb72e98fe016a08b3d2c1714d1c9715362a3dd0ce3104d","sha512":"c6437b95979087b8aa6abe5632de7d824cbd7eb11c2b48fbc6ba76ef071eed894eb9d391c1035fa03deda4f43eba5db0d5ddfbb0894fcaabe11ba08711807263","ssdeep":"","tlshash":"b361644da9ba501835532dab9acf1bc1366852371278ced0358d17304fb5cb864b9bf8","first_seen":"2026-05-11T00:12:50.930765Z","last_seen":"2026-07-23T10:00:42.502659Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2023/10/icon-footer-twitter-x-blue.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.393Z","timestamp":1784800784393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/icon-footer-twitter-x-blue.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 494\r\nlast-modified: Thu, 07 May 2026 20:29:13 GMT\r\netag: \"69fcf619-1ee\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":494,"size_decoded":847,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39a792387cc2e83afd86d2ee0c6c6f20","sha1":"8e9cbd796df41a108da70831792f1b2aab9fd4cd","sha256":"9107ba5f35085467508a9567e94605c7912f9dd0e54f8a8d1b39e9b002b6fd7a","sha512":"64c8f316e06af2770a801a26757a4f55750d4598896a528bec0725cd50f0174e106cdeb911c85f7ffc898f65c3cb1123f691a0071188f8384213b0567ea23e52","ssdeep":"","tlshash":"e1f09ef7c5cc244a1446cf03470e247108f770e6204989c69b61cff66d0d9562a5c9d8","first_seen":"2024-08-19T13:40:24.328889Z","last_seen":"2026-07-23T10:00:42.503717Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/5f57e9a1-1c98-4664-b832-805901aa6aba/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.057Z","timestamp":1784800784057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/5f57e9a1-1c98-4664-b832-805901aa6aba/consent.js HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\nlast-modified: Fri, 06 Feb 2026 15:36:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: YfFDKV5AUU98HfFuuIDHKD9SSMe20_Pu\r\ncontent-encoding: br\r\netag: W/\"66205d735388250e2f8e53600ff3b325\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 217e7e1681602f97edd05a1be6d5e5bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: mzLJnKmx8z9Q-GFhr7Rtrz84lYutHn2tJ2G9SevSW3le0tMioj6hHg==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":114424,"size_decoded":34759,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"66205d735388250e2f8e53600ff3b325","sha1":"c515de1f30d4aaae643bf0f97b67e9a259a9f5c3","sha256":"95ec5eaef664034ac04a61efd1a16097580de794f0d337e15dbfeda5c3041472","sha512":"fe553ba83492632358010f2a915105c9a15254e13c985d8e47dd2dabcbbde01c17cd6d7b4fc13d22f73b034392d1d5537f832be757c5c2ef54c0384a17c9f306","ssdeep":"1536:NBo5ziX0tcBwaOi79hkLGD1VDRoN9wZ+xuQTL56aMwbVCF:c5lqBW2kLu42Z+4aMA2","tlshash":"8cb34cb8a385f13c86bb596171fd680af5383805f802ccb2d5449c8625d3fdb2ad6b78","first_seen":"2026-05-11T00:12:50.971062Z","last_seen":"2026-07-23T10:00:42.504831Z","times_seen":3,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":15,"connect":9,"send":0,"wait":424,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/src/components/gartner/gartner.widget.loader.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.219Z","timestamp":1784800784219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/src/components/gartner/gartner.widget.loader.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6be-440\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1088,"size_decoded":918,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"18440321ce64f7384eec7f6bf599bd5d","sha1":"8220840fd9c3c7bac4c8d905fb3628f03ea0f7f9","sha256":"ee453353176eb94e1eb853252a368c410feaef0615b24df5fe88cf98f1b0de26","sha512":"4652cd7eee15db6273fe545f315103e8528dabdf5ec2f43dd6efa03acbd06534913a2bce229fceee1d2517ea97a20dc1b9454bd8e702542cd490e50583021e9d","ssdeep":"","tlshash":"4511bb8bbdbd853629dc009c422be0ac3734816cf159dca82d4d61214329ed29a73bca","first_seen":"2024-08-19T13:40:24.311294Z","last_seen":"2026-07-23T10:00:42.505973Z","times_seen":4,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-548V83L","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.776Z","timestamp":1784800784776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtm.js?id=GTM-548V83L HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 23 Jul 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172878\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530478,"size_decoded":173508,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24862)","md5":"044e50ee150f80bc2f79501306b64e1a","sha1":"a9d90df0b9146c3c31d5987f3144b16aaa42ed7a","sha256":"e159e36a35fbc2237952923208c98fa50f08c8a3d5025955680c8226850c96e1","sha512":"65820dd577b04696977c4e3ff652f9767773bcf8881acc861498f5d5aec6072e5fa0ff1a74e955d968f97044cca04a5d57450adb8315557694a8fb7b88fdbfac","ssdeep":"6144:k62Uu8yc1+hI0t9RlGYYwqY5T+cMz9d0C3TnHZI+OY0ft:k62Uu93MVkV","tlshash":"1fb409cdb3da74715393a4b8903f018ba57a28e2f45cd899f089cce42e746994263f7d","first_seen":"2026-07-23T10:00:42.441591Z","last_seen":"2026-07-23T10:00:42.441591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/connectors-CWtDSj7T.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.949Z","timestamp":1784800785949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/connectors-CWtDSj7T.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-DikFRP7M.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 41\r\nlast-modified: Thu, 07 May 2026 20:23:22 GMT\r\netag: \"69fcf4ba-29\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41,"size_decoded":343,"mime_type":"application/javascript","magic":"ASCII text","md5":"efc74bd93a86088993588f965c56d238","sha1":"1d94951245b86d53b87c680ab9ac39433006fe26","sha256":"d759293fe0280013a94611db5f12e07961b7094755ac3af6ad640226227c3212","sha512":"48d5aa6842a32436150697a74a728a42f57651896dc81223c76d588a16ee6ca65d82719dc1b5b3a11ec96c7b71d839573a1fe93687a55ad795a24f81f65c3dea","ssdeep":"","tlshash":"0f9004151051c3150011d345115cc41371104d54350f34c040cc0dd473134045410300","first_seen":"2026-05-11T00:12:39.041272Z","last_seen":"2026-07-23T10:00:42.507166Z","times_seen":4,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JGEQQZFVHG\u0026cx=c\u0026gtm=4e6331","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.052Z","timestamp":1784800784052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=G-JGEQQZFVHG\u0026cx=c\u0026gtm=4e6331 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 184465\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563920,"size_decoded":185069,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7292)","md5":"de3ef8d29808db1a037b9064cf983728","sha1":"3d96710a64080910b3d78de6640e18cf8194abd4","sha256":"09d857e321cadcdb7cf0b28377da83ddbd165142274af210f75a554a2654d7f2","sha512":"511c1aa86e19691099c7692438113164543bb8ee2a713ef28a605363db0fe5a52441b6cc6b9ae7f415b7b7f88172415c280d0a807363b8935aeada8f7de31147","ssdeep":"6144:54fp5Snyc1/T/I0t9RlGYYwqY5T+cMz9d0C3TnHabcK+O1xPMX2P:54fHSjTxM+bcmLcA","tlshash":"77c40aceb3d674225396f468543f01cba97b25e2b49dc8aab0c9cce02d7454a8177f78","first_seen":"2026-07-23T10:00:42.508495Z","last_seen":"2026-07-23T10:00:42.508495Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":41,"receive":48,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.766Z","timestamp":1784800785766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /getWallets?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=43200, s-maxage=21600\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1f9d58f289cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":993,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e55f922ace882ef6e265a86b1eae8d0b","sha1":"08cc8a993c1301b479358754a776f934f329829a","sha256":"4bb2cfb97eac7a32693654070c7827212d404adbe06ac5f193f55a546caa9151","sha512":"56f0d91556034b6d34aaf36f6bed0cf0f17407353a66d1334787cb41a35fe5b0bc91cd91b82c63ba84dc443c86ec97bfe8cc63154f3ec045cf52cbc80a59b6a6","ssdeep":"","tlshash":"f621039e57949c6b6f30ab84f14cf9cad83e851741c494aba0f0463941fe927b3119f5","first_seen":"2026-02-06T23:20:07.134745Z","last_seen":"2026-07-23T10:00:42.509497Z","times_seen":795,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.qualified.com/fonts/Inter-SemiBold.fcb100c7.woff2","fqdn":"assets.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.063Z","timestamp":1784800784063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"GET /fonts/Inter-SemiBold.fcb100c7.woff2 HTTP/1.1\r\nHost: assets.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Last-Modified, Cache-Control, Expires, CF-Cache-Status, CF-Ray\r\naccess-control-max-age: 3600\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: RHYADWD8AGP7Y2EB\r\nx-amz-id-2: gah4r0H5Nvoq5RI+hz1yFll5LsniDqW6Qgf+7Wsese/J6ckLBWItVW4QwyZrDrFXtB7ms6RKeB4=\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: gzip\r\ncf-ray: a1f9d5848cbf712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":828,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"ba62a5d69191ebf9eb627821c5fa4f81","sha1":"f5dffe2f4342ee96a15ca17472dac8b6c62bfdc9","sha256":"14d1808a9b87f82badfa0fb4771ecb8564e8a4d4a1f741b726570801da928ec0","sha512":"5b56f2c856c733f782c031765a12da9c5f0bf932c106f05dfe05d9743b6605a213f0678affcd75f0c1eb32c84d783db792399d2c69e872788ca5f74706bcefa0","ssdeep":"","tlshash":"a9d09736b30034135a520924333ff150ff04483026c812b22ea530872f5a0c24c3c638","first_seen":"2026-07-23T10:00:42.510704Z","last_seen":"2026-07-23T10:00:42.510704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":268,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-regulators.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.197Z","timestamp":1784800784197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-regulators.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41238\r\ncache-control: max-age=31622400\r\netag: \"6961ac3a-a116\"\r\nexpires: Mon, 11 Jan 2027 01:45:09 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-a-658544c96f-ps565\r\nx-styx-req-id: ff784e0b-edc5-11f0-a4ce-b2e8d93eebbb\r\nx-served-by: cache-chi-klot8100061-CHI, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 49, 0\r\nx-timer: S1784800784.254644,VS0,VE4\r\nage: 150865\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e4c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41238,"size_decoded":42076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ee7c1ac6a3dfaa00e5c1637963f9fd9","sha1":"08907740233341eeb9750b829845df376026274d","sha256":"0a26610c602da782bf64922d578770f7c3fab66f6899b4500981f9aa88200b71","sha512":"635b4e770d32dbdbbbd9537d83ab50c6bf59460ad24cdae4dddac8cbe25cfb7418d2e83df3cf6272b733a58d4f477b2357f02740074ecb73424d9a9fa29104a8","ssdeep":"768:QaculEX0SFAssVYTPwLlO1CtJ62C1R54AgGDcXkwL+oMYOCvQIuaQ9/82WQ:Auk0SDsVYTPwk1CL6LmAgnZL/1L2WQ","tlshash":"d003e1da1063b3c463e35983e8020dc683f85d1cc5b99f8976717c9ad9b0abbe4941e7","first_seen":"2026-05-11T00:12:50.916664Z","last_seen":"2026-07-23T10:00:42.511807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/wc-swiper.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.225Z","timestamp":1784800784225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/wc-swiper.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b6-bce\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3022,"size_decoded":1705,"mime_type":"application/javascript","magic":"ASCII text","md5":"dd0d940f00fdf336c07a2dea84bf3a12","sha1":"fb7c68a0f600ca660042b650e5575b7666e15026","sha256":"fcabcbaa70b722db347116838b4aa69e085e17f465e6cc71a7e5f6cc735057db","sha512":"43c4552f481a0674711076da9ff77e4e4d5162058973f28fc9fefac4c1fba67cb2305c99b8122d3f5738ee8ccc3c79e58c1ea0155dd8116e730b8b7f6660b5c8","ssdeep":"","tlshash":"da5144c2f73c35290abe70ba599861c3b67d4140b45375e9298ec86ce2c5866837dae3","first_seen":"2026-05-11T00:12:51.127815Z","last_seen":"2026-07-23T10:00:42.513378Z","times_seen":3,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_preferences","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.369Z","timestamp":1784800785369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"OPTIONS /save_preferences HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://chainsalyisis.com/\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: CloudFront\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\naccess-control-allow-origin: *\r\naccess-control-request-method: POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fb0991a0cdc083e8b3d013da8a2e9954.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: wolkv288haNUlrKMzmndEYkwUaRRiDiKTnaS6_ZKjagjT_Elah7ZSQ==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":658,"mime_type":"application/json","magic":"JSON text data","md5":"e3ac0ef88b7c21b828cfbd896952283c","sha1":"fe7af8095a1dc748a3bd25582159687a901c6bb3","sha256":"617f7515100f8a419ee293ae56945333a435d78ac67adf9e3ef5dc2103cff8b2","sha512":"e5c899358056552f7fab374f2a4da27462b6f84ba67e38b538298b08e03d40c0fbdba5c33468af98703563ce66ba687b4f274105c8b6b6d4066d216a785548fb","ssdeep":"","tlshash":"91600000c03c03f3ccc03c0003030c003f300c00300f00c0030cc030c0000c3c000000","first_seen":"2024-06-29T16:39:46Z","last_seen":"2026-07-23T12:28:29.859517Z","times_seen":3197,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":76,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/demo-slideout.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.791Z","timestamp":1784800785791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-js/template-content/demo-slideout.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/template-content.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/inc/gtm.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.098Z","timestamp":1784800784098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/inc/gtm.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 341\r\nlast-modified: Thu, 07 May 2026 20:31:22 GMT\r\netag: \"69fcf69a-155\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":341,"size_decoded":703,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5a9de51bc9e9b1847d4d4ddea338bed3","sha1":"01120b8158167023c3758d5b3abfb9ee0115fbc5","sha256":"a54d55f6405bcaf31f896656adbb4d8ade825cece189a334bdd08576389ad358","sha512":"7ebf1502799d3aea404d9cd53ce4af851f1e584b229ab3e09a701bf536e700379b90c9fe240a081fbd62b0b2a557dca147cc05294ec48bb39171ecbae263fb65","ssdeep":"","tlshash":"3be028da74110c7170dd05f533b1a11d71432708a8091d22cdfdc9142c2c5c74c134cc","first_seen":"2024-08-19T13:40:24.309421Z","last_seen":"2026-07-23T10:00:42.515345Z","times_seen":4,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/ChainSelectModal-DwW9MO4J.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.943Z","timestamp":1784800785943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/ChainSelectModal-DwW9MO4J.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4bb-55b2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21938,"size_decoded":6776,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"862ea730fab6d10afa418e32e6519a26","sha1":"e1e6d8f531b8f1899daec6fcda1526edc381ae90","sha256":"0ea324065dea85a06d0b71a1bb80b007e71f34613478496df4e7f25bfacfa83e","sha512":"81ff4d4dd939d41f73aa90ef919f2927a19c3a26c081193ca6ac5ae1db09f41ef4552cc1b2c6cf986f522b1cfc158869397f364ac3ec8105f10237ce0a33b000","ssdeep":"384:x+qlNQC7sccDLJ6dwNx+B/74aVMb49dse:UqlGGsBLJ6dwNxizDVMm","tlshash":"21a2b415c7b0226a2667217c195f8a657231048f0f19beac3f8c15a08f5c66f2df67ee","first_seen":"2026-05-11T00:12:50.884887Z","last_seen":"2026-07-23T10:00:42.516412Z","times_seen":3,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Droid%20Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.119Z","timestamp":1784800784119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Droid%20Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":391,"size_decoded":968,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7f4808d545d81cdef90072525f618568","sha1":"9f8fd98c43ae4b03c582cb84acfc4fb07e4e2873","sha256":"4447b9a8a3769bc0fa833ea448d44683c44bddcb560c7185815c10b1f15f4a18","sha512":"82662ea100aaab9c71aa17fc275590d4a86f1561efc71a73a2077673425ef9e201b0be13c7f5e9ac280dd696feb036a4072687ab71ccb06b71e5976cb70122dc","ssdeep":"","tlshash":"71e06881082ab514ea932cc553ce7931df0ee1542484a9a0aafe14d8fc41c5a63a2b5c","first_seen":"2025-09-10T19:58:56.394692Z","last_seen":"2026-07-23T10:00:42.517665Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2023/10/logo-bbva.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.168Z","timestamp":1784800784168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/logo-bbva.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:28:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf601-d15\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3349,"size_decoded":1720,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab591e3cd7c2072b0ec29cf1a4d6ddfb","sha1":"a95467116782d713540c3a8a3f47cbf66108564a","sha256":"8c963c6049df9979e80fcbe9a5fb036f47095db4f8a539bee260a6a0b3c6de9a","sha512":"81911b793a78d912e2a09b143ffe476706e39b580004ccfe17623fbc5925f2d6a9e6a6dee64843e625bcaaaf8d3c815ce15675edda49e1bda5e5f6ac7b4f7753","ssdeep":"","tlshash":"506183d9bbe9f1e0e804c7d4e76ba830785424b23e159765c297e6a4da2304cc8c5ce4","first_seen":"2026-03-06T10:03:01.189208Z","last_seen":"2026-07-23T10:00:42.518229Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2022/11/icon-linkedin-lightblue.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.391Z","timestamp":1784800784391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/icon-linkedin-lightblue.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 947\r\nlast-modified: Thu, 07 May 2026 20:23:47 GMT\r\netag: \"69fcf4d3-3b3\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":947,"size_decoded":1300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62c360b989e05a4da1c233a83303138","sha1":"7da7db2e9c864dc3874339880ea055d7d3393770","sha256":"8e079d298353b545235f43a1b881889a76ee496d94e2ac1991f73cee7e77f07b","sha512":"1d60b6a281f2342557f716a40204a4d7b89312730eb5dbee7f54c7a69a99b547027d7001d9362dbd79c93c8620404a0460bf7498757d5342dc572a7787be872f","ssdeep":"","tlshash":"ed111cf7a1dca2455211cfdcc4388c97322a10fe3ec0cb968034a63131a2abad8d4989","first_seen":"2024-08-19T13:40:24.328264Z","last_seen":"2026-07-23T10:00:42.519314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.qualified.com/w/1/o1RPkDjgCZhS1uqU/visitor_events?wu=","fqdn":"app.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.951Z","timestamp":1784800784951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"POST /w/1/o1RPkDjgCZhS1uqU/visitor_events?wu= HTTP/1.1\r\nHost: app.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://chainsalyisis.com/\r\nContent-Length: 88\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"event\":\"widget_time_to_init_ms\",\"type\":\"log\",\"extra\":{\"method\":\"dist\",\"operand\":1900}}"}},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding,Origin\r\nx-cache: bypass\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-envoy-upstream-service-time: 8\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 170008cb-52b3-4632-93fd-6931da55c994\r\nx-runtime: 0.006489\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=04dToRZvnHD7Qac3UNYSzevvydo1fyz9XPHrTRiUyy; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:45 GMT\r\ncf-ray: a1f9d58bfceb712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":1459,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T09:59:43.074Z","timestamp":1784800783074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 07 May 2026 20:20:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf41b-e2f0a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Qualified","description":"Qualified is a B2B marketer that allows buyers and sales reps to connect through real-time website conversations.","website":"https://www.qualified.com","common_platform_enumeration":"","icon":"Qualified.svg","categories":["Live chat","Marketing automation"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Marketo:164","description":"Marketo develops and sells marketing automation software for account-based marketing and other marketing services and products including SEO and content creation.","website":"https://www.marketo.com","common_platform_enumeration":"","icon":"Marketo.svg","categories":["Marketing automation"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":929546,"size_decoded":150601,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (308)","md5":"d74ea790b6064ef28f1f76f86e9c342b","sha1":"779b8657962f3fda55518cb552b8bb0d959736ad","sha256":"bac5354cd3e55fd8c40cbffd4a0fd6743d9e6c06f61c8ed764c78583a589acdd","sha512":"1861a0ad7333040249ab9ac28aabb6b05e3aeebf8f3deabe194fe14a6958c50804be9a225ec2efd2e4e872526b5aabc776e4b2179c0a6430cb182eaa7bef624e","ssdeep":"6144:Pne+2Pz//lXjhlbDpb36WWNMRXxieo1qJ/VAEB/pUFBJlwWT9CVjhuOR3uabwjd/:kVV3yNMRXxieo1qJ/VAEB/pUFBJltCc","tlshash":"c31509855af080b541db41f89a37760ca7619207cd04a988bfbc57e88fd9d3edaf3609","first_seen":"2026-05-11T00:12:51.006127Z","last_seen":"2026-07-23T10:00:42.520448Z","times_seen":3,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":37,"connect":62,"send":0,"wait":61,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.091Z","timestamp":1784800784091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:23:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4ce-2994\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10644,"size_decoded":2898,"mime_type":"text/css","magic":"ASCII text, with very long lines (10644), with no line terminators","md5":"ba4cc2135d79faefe28d070ad9d25a43","sha1":"b66e5c5078b6039830caa941dfb0c24c3605aba6","sha256":"35c4a28b795f7eb020fbbd51320c5a47727040a1bf9660b40babf4e563250008","sha512":"b47575bab8f318f9684b598e278e212a390276565c264780331e8728c718829b72682599bc71e3c416cfe30293eb63422b0d7d609d6c68d3db50ede0ca17915e","ssdeep":"192:ZClNtmYGqKYsTAPqkLgT+TuTHTiaTiTdT3TUTCTrTmyrHQt/o:Ql6YsvCqrua+J74O3DrHQt/o","tlshash":"c022102bebd9157a6523ccb7f713b6bcf4282881af8708aedc01e33d474199b1a69544","first_seen":"2025-03-20T21:25:52.220271Z","last_seen":"2026-07-23T10:00:42.521826Z","times_seen":5410,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/plugins/chainalysis-marketo/js/marketo-munchkin.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.212Z","timestamp":1784800784212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/plugins/chainalysis-marketo/js/marketo-munchkin.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 538\r\nlast-modified: Thu, 07 May 2026 20:23:40 GMT\r\netag: \"69fcf4cc-21a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":538,"size_decoded":900,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd30bf3e826a8ebe232346fcc10a911b","sha1":"de7e36fad73f152767dc139ff161bdb955bc7beb","sha256":"0a2307098af436b653de86b4ed590a90b5ad55a0d62411940d0d69f4edf45514","sha512":"5300dadb07401a94d3c188e791b757b0bf5edee8feb97cf3b210f17aa769c57727a7ccf7f1ea0451ef9e40d203c4ac709c1c1175bb56aa02edac8c28a5f07388","ssdeep":"","tlshash":"0df0c00e19df1136e42832090f5f923835f1c8a506219d44e80cddc85d20e3cda2ee09","first_seen":"2024-08-19T13:40:24.305402Z","last_seen":"2026-07-23T10:00:42.522404Z","times_seen":4,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/src/components/ashby/ashby.widget.loader.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.220Z","timestamp":1784800784220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/src/components/ashby/ashby.widget.loader.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 838\r\nlast-modified: Thu, 07 May 2026 20:31:58 GMT\r\netag: \"69fcf6be-346\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":838,"size_decoded":1200,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"546c2d1448ccebce189886fe085e2f9a","sha1":"df86244868d5076c9fcb6fa61d21694b2a3a7d4e","sha256":"54785003bcee3170f2af66edbe6cb3d12e56534b765db16f06524099f67f6a71","sha512":"27e697067e50aae3a922940b8e59ec3c2c360e199a1be3a5be59771dd2aa607e86db20c1e7e4a8cb96e4a1bba872d93ff378354721fd3f976dea373d17a415fa","ssdeep":"","tlshash":"1501eb0b693c883228e911ccc22bf17c3378c12cf016dca43e4d5112022aed65917bd5","first_seen":"2024-08-19T13:40:24.310045Z","last_seen":"2026-07-23T10:00:42.523509Z","times_seen":4,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/animations.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.754Z","timestamp":1784800784754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/animations.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6b5-c7f\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3199,"size_decoded":1460,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"15060533c6fa7eed8248e77508fc7690","sha1":"be41262d3d17e4645c49c4f6a9751113faad5c4b","sha256":"fe0722fc2331cc5b8219707a7368142b538209ce5cdc41675a5074aebd1ddbe3","sha512":"3cd1b3ab00355529253b36558f7de40db19b2d46fe9b2b31a52a954de6ec05bb3ef826c8b595dd967bd1b9e5f37e3ba879d2a05debeed190b6a6bf4fa3810d9c","ssdeep":"","tlshash":"ec6153d1a26c523f47ef12b7052c22db2f7c4023b46241aa3d75926c239edb883129f2","first_seen":"2026-05-11T00:12:50.927605Z","last_seen":"2026-07-23T10:00:42.524487Z","times_seen":3,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/save_preferences","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.365Z","timestamp":1784800785365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"POST /save_preferences HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\ncontent-type: application/json\r\nContent-Length: 651\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":651,"data":"{\"userIdentifier\":\"1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e\",\"consentPreferences\":{\"cookieOptions\":[{\"gtm_key\":\"dg-category-essential\",\"isEnabled\":true},{\"gtm_key\":\"dg-category-functional\",\"isEnabled\":false},{\"gtm_key\":\"dg-category-performance\",\"isEnabled\":false},{\"gtm_key\":\"dg-category-marketing\",\"isEnabled\":false}],\"isCustomised\":true},\"customer\":\"1f6af024-d72f-427c-ac88-91db3d7de6d1\",\"consentMode\":\"optin\",\"revision\":\"351e8300-2a3b-433b-9fe1-788eb964db9b\",\"currentPage\":\"https://chainsalyisis.com/\",\"buttonLabel\":\"GPC\",\"policyName\":\"GDPR\",\"defaultPolicy\":false,\"localeCode\":\"\",\"cookies\":{},\"gtmConfigCheck\":true}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: CloudFront\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-request-method: POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 fb0991a0cdc083e8b3d013da8a2e9954.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 3KzOTRavGngQC0GtA1FD56H_h01U4NuOHmh6H8IPi5KvlPWwKEXJ-g==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":658,"mime_type":"application/json","magic":"JSON text data","md5":"e3ac0ef88b7c21b828cfbd896952283c","sha1":"fe7af8095a1dc748a3bd25582159687a901c6bb3","sha256":"617f7515100f8a419ee293ae56945333a435d78ac67adf9e3ef5dc2103cff8b2","sha512":"e5c899358056552f7fab374f2a4da27462b6f84ba67e38b538298b08e03d40c0fbdba5c33468af98703563ce66ba687b4f274105c8b6b6d4066d216a785548fb","ssdeep":"","tlshash":"91600000c03c03f3ccc03c0003030c003f300c00300f00c0030cc030c0000c3c000000","first_seen":"2024-06-29T16:39:46Z","last_seen":"2026-07-23T12:28:29.859517Z","times_seen":3197,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/02/logo-etoro.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.182Z","timestamp":1784800784182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/logo-etoro.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:25:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf528-e55\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3669,"size_decoded":1759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99d3caa30928d6742e46e77930cd4848","sha1":"f312808a820eff0f708d3955c5cb28bda1d750f3","sha256":"9d4b857dfaf2ff0687455fb4fddab0c8d47fdc126467e8caa31d17c619eda221","sha512":"3193ce2929f44c3d652f65fd88db45c2d143ecba4cb34886896325db5c180780c9b36a84c39d618f7af0c3b544b5cc2173f81a8f469908619981144c7288d665","ssdeep":"","tlshash":"807154f0628873f5b40543a4832b54e66e8f24fd7fa78a61c7985e80f8494af87ecc45","first_seen":"2026-03-06T10:03:01.200769Z","last_seen":"2026-07-23T10:00:42.525511Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/03/home-categories-mobile-3.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.183Z","timestamp":1784800784183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/home-categories-mobile-3.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:24:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4f7-11862\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71778,"size_decoded":27267,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c59253c81a8f4ff5bb7127b52ae9ae03","sha1":"aa6e66649538740fefa0fe4f712a93e85750a434","sha256":"72cbcacca0ffd8771af36b65545d51cca02dbe2d8f3e2eb4b025039264c56b89","sha512":"509ef81082042e2a2154dd39335ce25dccf5d903fe8312c9bb856b5e520f69f9f0bf695b048062c78e7f7026113f7b8defc340ab34daa322ce9593d0bb56b51a","ssdeep":"768:Nm9t0uh4fGV6K5mZCAGx7568koEXBvRSX/7J82YYA+GnbZPjwfVZTq2Yp0RYUJzj:s9tE+V6tZCtURMTYYkFj8RJHSU","tlshash":"5163c7cd2fb193d446c8cbeb3f1170ec772760f79a984d69c1ac9fa855e2a2d4909843","first_seen":"2026-05-11T00:12:50.961809Z","last_seen":"2026-07-23T10:00:42.52649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/node_modules/@lottiefiles/dotlottie-web/dist/index.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.758Z","timestamp":1784800784758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/node_modules/@lottiefiles/dotlottie-web/dist/index.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf69f-6b1e3\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":438755,"size_decoded":53091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29709)","md5":"2feff604cdbc357c56fd0bbcae7ae1a3","sha1":"21c35177bf147102c28c92f962a9c08f01167942","sha256":"323b3d431eb0db981a9c5d5886419c530d75fa16d5635d3d9cfd1a5ce6e784f9","sha512":"bf463172b7dd41b936c74006ba433b7d2a27c46426d3ce81cfc4c277f34a4827e7aab7524ab1dee7352e9a1791f8ef71f1ecd688b62349edb84b2cf1df745490","ssdeep":"6144:/IZXGvTgmxDPDSgYlAuUkFFgnkmrsH4+g5it6zMR/:18","tlshash":"be9414a273881ba6e54809e94164e20bd4f6d02e342525cdebf6b797f43d5a2fc1c3b4","first_seen":"2026-07-23T10:00:42.527609Z","last_seen":"2026-07-23T10:00:42.527609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.qualified.com/w/1/o1RPkDjgCZhS1uqU/visitor_events?wu=","fqdn":"app.qualified.com","domain":"qualified.com","tld":"com"},"ip":{"addr":"104.18.16.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.958Z","timestamp":1784800785958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qualified.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:29:41 GMT","end":"Mon, 14 Sep 2026 10:29:33 GMT"},"fingerprint":{"sha1":"45:D9:E3:0B:0B:29:19:5C:B0:AC:67:47:45:4D:04:9F:8F:79:89:81","sha256":"B2:D3:25:F6:E2:95:D1:05:30:D5:C0:A5:B5:65:49:3D:BA:FC:FB:90:D7:3E:F0:80:9F:45:38:45:AD:EC:2B:1F"}}},"request":{"raw":"POST /w/1/o1RPkDjgCZhS1uqU/visitor_events?wu= HTTP/1.1\r\nHost: app.qualified.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://chainsalyisis.com/\r\nContent-Length: 92\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"{\"event\":\"widget_time_to_domready_ms\",\"type\":\"log\",\"extra\":{\"method\":\"dist\",\"operand\":1014}}"}},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding,Origin\r\nx-cache: bypass\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-envoy-upstream-service-time: 6\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: fc63700b-3c85-4092-bf73-5702c13c4c15\r\nx-runtime: 0.004698\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28uxcrVnMGuZKc8nszHWEuyjt8ZUsWSGhDKqWD3oy; HttpOnly; SameSite=Lax; Path=/; Expires=Thu, 23 Jul 2026 10:59:46 GMT\r\ncf-ray: a1f9d5904909712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1464,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-css/site-footer/site-footer.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.071Z","timestamp":1784800784071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-css/site-footer/site-footer.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6a4-e60\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3680,"size_decoded":1344,"mime_type":"text/css","magic":"ASCII text, with very long lines (3679)","md5":"36383752c55340b338f69a3afe543175","sha1":"2dc26207c431735c5134f3c5f8630e0115e4009f","sha256":"af410d552064da24642636d0383fa04efcf29dfa3672bd29fd067b0403ed08c6","sha512":"e5e7305c27ae1cd3cb709b9cb636d5c1b75e030354e9d37005ad5ba332b6cef5e23ce85d656ada3b0e0a7b9218c099737f106e4daa6cf8c5c1fda9b5c27805ac","ssdeep":"","tlshash":"b371d83ef34a1168a3274793b3d967a8d170d41cc24b5cf6bbcdd731a1cb3aa0922646","first_seen":"2026-05-11T00:12:50.99857Z","last_seen":"2026-07-23T10:00:42.52876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/integration.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.125Z","timestamp":1784800784125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/integration.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4b9-5e77\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24183,"size_decoded":5449,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14153)","md5":"e3eae675c1620f0402ca496bcc267c64","sha1":"ef2dd585b129cde31cdb21edd0e6aae43d42b9b9","sha256":"933a4b331efce4944ca0f3b8aeff0d23a0093faf6081c9784727a2ba8065bb1f","sha512":"a7e37b9b0572d10aabdae30b415982cbee75c7d2baf80c8642a305dae9cdee4b370cb2a9f4281ee9f1fe42bc45f2f1920a756aeea64fae31c7ad2a62c9092159","ssdeep":"384:XPWWCtQzber5ClRqjoIFcgR6Qg1iIZPU6xYhGX7quEotHPaDAiqX8XFXcXgXPXda:XPWDQXszNbk","tlshash":"5ab2844099202e39bd23bea656ccdf4cd12ad4c258eb1a9d7edf510d46c33c90b7a74a","first_seen":"2026-05-11T00:12:50.92375Z","last_seen":"2026-07-23T10:00:42.5305Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/12/fireblocks-2026.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.178Z","timestamp":1784800784178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/fireblocks-2026.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:27:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf5a5-1acb\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6859,"size_decoded":3059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba9ab2227dc37612b9decf71720f4b32","sha1":"3b7f43182e706ea3d8d54725967150daf45724dd","sha256":"f9399eaf8979a6c26ecd7d5f5f00eb30e864f20a8729f58f126ddd2c9d1563f1","sha512":"ceddf259ecafd2d5187f8b19fd7ca5c417e64e24383d8c4d58c01a5fde67763ee495b820bf4a515db2914d03d766972b4463a1fed881c696efadcda66b68a548","ssdeep":"96:p4WQMKHHkxbNLXETSnG8JHt21tn7hk7IhrQevJDcZ9RaxqUaa8Xrl:oMKnkVZ+SHN8t7hkIfvJD49wxqN/h","tlshash":"bde1b9cf73f892d9d581ebd2f41621793a1b64fd3e608a91c3549e4afd8a0994c45c48","first_seen":"2026-03-06T10:03:01.205669Z","last_seen":"2026-07-23T10:00:42.531897Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/02/checkmark-blue.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.189Z","timestamp":1784800784189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/checkmark-blue.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 298\r\nlast-modified: Thu, 07 May 2026 20:25:20 GMT\r\netag: \"69fcf530-12a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":651,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ecfd4720be453dcf429dcd5ef2e0437","sha1":"2a5ab7b7e5f2085d624c062acf5517d621ff3828","sha256":"c748444249428d3f0bc4f8723e9289c0fec07d827bb3afe3c0e586f0b78a1951","sha512":"8ea0dbec6f612c19ac73e0f87c1375fe1421d232b7c861b494a142607c8897ae1977c9d6a97596cb3788331d9d1b51cc95b1958534ac4e7fc5387a01850f5ac2","ssdeep":"","tlshash":"abe0eb31131d1528f2200b402738b6f690f172ea425a0148f9c4360bb12ccff6cbe0ec","first_seen":"2026-05-11T00:12:51.038998Z","last_seen":"2026-07-23T10:00:42.533036Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.410Z","timestamp":1784800784410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 3759\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 23 Jul 2026 04:08:26 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8634cee42b68c501da8d76beee00bf86\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e813bb2fe72a7a317b92ea146f692ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 21079\r\nx-amz-cf-id: TzKTp-BvPjymid4ohkD7UZLxVo049lYiq23iOgnQHKv2OpR6BSh_rQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":4331,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-07-23T10:00:42.534246Z","times_seen":2489,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/requests-7CjONt2q.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.240Z","timestamp":1784800786240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/requests-7CjONt2q.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/SolanaConnectComponent-uxHEgwR3.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4bf-29fe7\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172007,"size_decoded":38259,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2177)","md5":"7cc8c0dc9bcc0539d3726d896ad21716","sha1":"80484e86e9febb2ce7dfeca16ea77b588d5a9be6","sha256":"0d5f44eb5be72399be2539a7f5d04f5d54ca0c31e5fbc53086bf1f1d0b8dadd4","sha512":"6b45e73d0166dba8866b32ee059df79dbc72a7ebdc1122603b0b5f310e2c8ddd6fa14262a9d1868c8b4884a3ba26b424ab50994718e88bf20beb3d41a303566d","ssdeep":"3072:sPsj/XP72/53Gc6U54vvhiQGHiSLdXqi1aQwGzn5UK+UzVIHbWqhvjaMZRVwnJEu:5j/XP72/53Gc6U54vvhiQGHiSLd6i1ai","tlshash":"acf3638a6de324c0622bf438072f9845e166341b1e29fc0d745d96b48f5d62d0bfafb9","first_seen":"2026-05-11T00:12:51.105246Z","last_seen":"2026-07-23T10:00:42.534827Z","times_seen":3,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/03/logo-tether.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.179Z","timestamp":1784800784179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/logo-tether.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:24:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4fc-c56\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3158,"size_decoded":1765,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e2f079055aa0f9d9c30891a03d1cd6","sha1":"1ee643ba6614d365524042ef965a4844ccdf3517","sha256":"9f4be00839b41b02ddde0c727308003ebbc63e3e3338a58da8910daa0311cf5e","sha512":"f897b32029fb75c98b157fe0236f75290c673b2ebccbea7705f953482a11ec0c529800b56fe020288048b02cb7ce011b04c9433f0ed7a0a998e4ff19a2af065d","ssdeep":"","tlshash":"ee5197cde7765ae8e5449bf4871698b43a722ef12872cf68c7e81826ed1043c5819cc7","first_seen":"2026-03-06T10:03:01.190205Z","last_seen":"2026-07-23T10:00:42.53601Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-cybersecurity.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.206Z","timestamp":1784800784206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-cybersecurity.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24850\r\ncache-control: max-age=31622400\r\netag: \"6961ac39-6112\"\r\nexpires: Mon, 11 Jan 2027 01:45:09 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-a-658544c96f-rqhfb\r\nx-styx-req-id: ff7db5c3-edc5-11f0-86c6-12bed3af2f31\r\nx-served-by: cache-chi-kigq8000070-CHI, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 0\r\nx-timer: S1784800784.255302,VS0,VE2\r\nage: 150866\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e3e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]}],"data":{"size":24850,"size_decoded":25688,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dfcb785b139f78f655101dcc855ea9a9","sha1":"6e2e81f8c677e1022cc7216e9af5c5066df2381e","sha256":"21759976dcfed79979b161062d7a2cb40e9de8f08b74be090aeda0bcc9780683","sha512":"c1430f91b96a030a4346e181518ea63842111775f75928796464b1ed151f02b7f2d220ccd16bfb99b7bc4214cd1966678e6e8967965082b3585a17efbf8e7733","ssdeep":"384:rvcYRdDPp36kPauEmY477MIu9TOwFB7OpygE4I62mezqILohcTcYcJzlvk:rvTvDPpkzm/7o9XbOlefmT0oocVvk","tlshash":"21b2e12c236922cbc48affdfb701666c5b4a599e52229c3503d3b841502cab1991ef9f","first_seen":"2026-05-11T00:12:51.012318Z","last_seen":"2026-07-23T10:00:42.537481Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/select2-implementation.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.789Z","timestamp":1784800785789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-js/template-content/select2-implementation.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/template-content.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/src/helpers/waitForElement.js?ver=null","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.293Z","timestamp":1784800785293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/src/helpers/waitForElement.js?ver=null HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/src/components/gartner/gartner.widget.loader.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-centralized-exchanges.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.200Z","timestamp":1784800784200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-centralized-exchanges.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29934\r\ncache-control: max-age=31622400\r\netag: \"6961ac39-74ee\"\r\nexpires: Mon, 11 Jan 2027 01:45:10 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-b-657b4465f5-lsrpp\r\nx-styx-req-id: ff7b6771-edc5-11f0-8197-7ae5ba7ea65e\r\nx-served-by: cache-chi-kigq8000078-CHI, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 51, 0\r\nx-timer: S1784800784.256060,VS0,VE2\r\nage: 150866\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e3a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]}],"data":{"size":29934,"size_decoded":30772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a251691e2e42163ccbd1cd06b7d98da2","sha1":"e5ceeab681cca1e79ec15dd9fecfef1a8d0d4eb8","sha256":"3e21f60a0862baebf72f4fd59cda1d3e7baafe88dc2fb88dc742fd25a7510f0c","sha512":"e72fd1355dd754114f334567d0f80d7194408556234b5fcfd8f93a023ad8757f98bfb1fdc913c202a975ef26f1104d0668d4c8abbee1385b690bd99fd81fda77","ssdeep":"768:INjFGhM1gye68MpWYetd3ANmpNu+8CASVN:yFGhD6mYO9OwNf7P","tlshash":"7bd2f18d30668184668d5643815def241cc2fce7d510b3c54cc66aad4daf2df1c90fe6","first_seen":"2026-05-11T00:12:51.143447Z","last_seen":"2026-07-23T10:00:42.539063Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Droid+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.065Z","timestamp":1784800784065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Droid+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 09:59:44 GMT\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":979,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4dc1dd93926a8b9d59719cacd95ae2a7","sha1":"b8e20061ab338e3800d5ca5905f89314b454762b","sha256":"abf7529f44bd543424bbd662fd12782e3774e98e126b7969c7b7e069e2398363","sha512":"f4dfa142133e7947cb10db158f73962d10f8c0f9420c4685454be804b13ed7f9d86df1520f8d50c32f1f0801d39e47d0ae4fab2a4329e34a11f397740a156468","ssdeep":"","tlshash":"cfe0f18008267500ea431cc053ce7d31df0ed0102440d5b4aafe14c4fc41c161362b5c","first_seen":"2025-10-01T22:28:24.726333Z","last_seen":"2026-07-23T10:00:42.540128Z","times_seen":26,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/cta/cta.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.100Z","timestamp":1784800784100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/cta/cta.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 858\r\nlast-modified: Thu, 07 May 2026 20:31:45 GMT\r\netag: \"69fcf6b1-35a\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":858,"size_decoded":1206,"mime_type":"text/css","magic":"ASCII text, with very long lines (857)","md5":"10a73e1ad24362e33d1731282d22771b","sha1":"6acea8c31eb4506c99d6da57c0692c532733cd67","sha256":"fe0892eb1b708dece0ac916f88a8a1f6d5c7addadcf2d6a8ec6fde4e420dc4fb","sha512":"976af29222265909227f9dfa210ad4b19ea77326a1df22bff0bb1c6d4f7ba57404ef82b2a4fcf024f3e4e1a561bd7f059c16e069ca8b197a08f0079514da1c42","ssdeep":"","tlshash":"f8115c5553ad60afe52bd618f6ec710f07a4c0a186171fd4852e94e8a6d9bc006aa2cd","first_seen":"2026-05-11T00:12:50.88692Z","last_seen":"2026-07-23T10:00:42.540702Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/node_modules/swiper/swiper.min.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.113Z","timestamp":1784800784113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/node_modules/swiper/swiper.min.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf69e-1a3f\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6719,"size_decoded":3385,"mime_type":"text/css","magic":"ASCII text, with very long lines (6459)","md5":"031b7f26afaf0a2db55663f995fcede4","sha1":"cc293d20aa0584f48c2c6ddb4a0da487650b2b0c","sha256":"1f64e68c9cbd65ff74b23626ed9ed9b873b7df94b7cb16d54afe55560bf7c344","sha512":"72173df5c2890106643edbe9287c2cfc535a2ab436e0f1b3ed4df2621d4a9119cdf89f7e2ea2f89c7cd73b4c7c62a070df96dd560fc11ccbc47c27611982b648","ssdeep":"96:LbB5mSJ+MbpDAKneQYXZJToiR5dKSme+jeF4aZDayEIwJk:LjmUJbiKne5JTLdKSme+jeF47k","tlshash":"a6d1c83073101c2362234f295b44eab85ea484635fa38519f6856f3ceffd8f5115eb92","first_seen":"2025-06-30T04:05:48.656756Z","last_seen":"2026-07-23T10:00:42.541593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/home-data-solutions-1.avif","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.187Z","timestamp":1784800784187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/home-data-solutions-1.avif HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 18779\r\netag: \"6972560f-495b\"\r\nlast-modified: Thu, 22 Jan 2026 16:53:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-7ffbcf568d-z6bsh\r\nx-styx-req-id: 2d1db675-8679-11f1-936a-6e5c16bcf6d9\r\nx-served-by: cache-chi-klot8100134-CHI, cache-bma-essb1270040-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 2, 0\r\nx-timer: S1784800784.258000,VS0,VE121\r\nage: 0\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e484c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":18779,"size_decoded":19540,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7cde18268123f2956ad6803f5c16996b","sha1":"b69c1bc63aa8e3d4d742e2f3f82ad4d9977338c1","sha256":"26a7a6067201827d2ffc0f2babf3a5f693576f2959707a159578bea540e65cc9","sha512":"ee544906f0ebdb6b49221aa12320c179b3e9e5af53aa6dbc82cc8cda711a6f91d5531134827e6d8e2a281a7a9d593bef501ea6cac4bc47add81aef8f81509da0","ssdeep":"384:Z9r1Q+r5Qu6rOo4JCFpuuBHsGidVCeD1oC+Z2G/menvuLmG2knoEjpd1lGNrhmn:RQ+r6y2DuCHsGyVliC+BmenvuL12REjX","tlshash":"6582d1011f7eacc5d64866b0c45bfb8201e0ea565669e117f982e000c0a7ddfbed2ece","first_seen":"2026-05-11T00:12:50.909409Z","last_seen":"2026-07-23T10:00:42.542541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-decentralized-finance.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.203Z","timestamp":1784800784203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-decentralized-finance.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24348\r\ncache-control: max-age=31622400\r\netag: \"6961ac39-5f1c\"\r\nexpires: Mon, 11 Jan 2027 01:45:09 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-b-657b4465f5-lsrpp\r\nx-styx-req-id: ff7bcd8e-edc5-11f0-8197-7ae5ba7ea65e\r\nx-served-by: cache-chi-klot8100055-CHI, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 20, 0\r\nx-timer: S1784800784.252722,VS0,VE6\r\nage: 27230\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e434c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24348,"size_decoded":25185,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"63fdf959418112eca5ef7e5ad204d668","sha1":"e730e823a0fe2c9dc318f18f4206260485f22d99","sha256":"97679c2094747073ded2d58c2777b110b2bbd2a9646bcf44d1e1622d00596d17","sha512":"5b016fc5d256be564dd4833de71f6e2f5b15e8ab293ac4b62715cae4525f9eb8dcc049ae39475c4fb774fe399ca5fe284c3371143f3f54e5142936fe5241f5de","ssdeep":"384:z/GJMrptCk23nXjxZl+ho9TWZ1SnvPBXFka4X3t1n6QckLwfWioO2W3D2dVcOi2:ic/WiAkYnvPsaqt16QJ8ToOR3iLcOl","tlshash":"7db2e1bc68532563214d3f52586a4072c7eea73acfc45643a2fa6ec1c49f084f5e867e","first_seen":"2026-05-11T00:12:51.076021Z","last_seen":"2026-07-23T10:00:42.543445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-css/template-globals/template-shared.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.076Z","timestamp":1784800784076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-css/template-globals/template-shared.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6a2-abb\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2747,"size_decoded":1417,"mime_type":"text/css","magic":"ASCII text, with very long lines (2746)","md5":"854d0c7f40761efc0b53b21e50a65699","sha1":"66272877293b9c956aca9579f6f03d2b65036f93","sha256":"3e4a9e5c4086bc00ebaa363d1529df49588d15b012a1c041e6a64cf5afb4721c","sha512":"5f9c1fcb2424e1d5b42976ebfc8dda0b3f4e223edf795361049afe8c9f1f5cfb884eb93d477a901c2ff563b1ce13d599690165edc35253c5eb6131ce73d2da58","ssdeep":"","tlshash":"5351d3a085711324f7b6c3e9e08375a9ff1dbc36c75764c9ca44ba9cd6955e20181b28","first_seen":"2026-05-11T00:12:50.999419Z","last_seen":"2026-07-23T10:00:42.544341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.095Z","timestamp":1784800784095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c9-3509\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5241,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-23T12:45:39.024073Z","times_seen":905306,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/mulish-regular.woff","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.998Z","timestamp":1784800784998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/mulish-regular.woff HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/reset.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.073Z","timestamp":1784800784073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/reset.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 482\r\nlast-modified: Thu, 07 May 2026 20:31:48 GMT\r\netag: \"69fcf6b4-1e2\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":482,"size_decoded":830,"mime_type":"text/css","magic":"ASCII text","md5":"10385292567db5539f1555f672181356","sha1":"9a90d96ea7bd0a86697a4fb9edec8e8cbc932d0a","sha256":"108cfb08e268d49370205c883114961ac2a04e8b45a4e768d4744adf6d2313a5","sha512":"956a481a7b65d77df1dabb5242b21c6a6f52b2e9aaf86395036e1cc7bf9cc3812e7254cef4a5c057b1586ef45ee5d2ae46179db627ce4274206b7e145be693b1","ssdeep":"","tlshash":"73f0e9a105ba6a0443f7c1aca4657108717cd061db9d68fa01dc132cd3d5bddc5a669a","first_seen":"2026-05-11T00:12:51.031717Z","last_seen":"2026-07-23T10:00:42.545586Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/modal/modal-wc.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.102Z","timestamp":1784800784102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/modal/modal-wc.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 May 2026 20:31:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf6bb-18e8\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6376,"size_decoded":2043,"mime_type":"text/css","magic":"ASCII text, with very long lines (6375)","md5":"620dd8d649ac83b922d08f16f8080c3b","sha1":"04c929e01bc65c1ea2d0e342efc0b8f3b8913157","sha256":"08f4785b32d49ef92d6bcc602c0bbe6263c75a4bb9ee399a8fbd7b9d658e3cc3","sha512":"e0717828dbebd540830a6bafbb15e9c67f0ae04a83a95b3c4dfff43d594c6dda6ee59c126a14c1e420fce36b55186c1ecb816b282179b9ac8c6fb1a36d594562","ssdeep":"192:oZw48jME1pXDgX2rVh8U3CUPVEVr5EhKEVBXnaR6t:o6XME1qk6dWv","tlshash":"72d172444d3c50aca5ef8063b8db4fb9533a91319432a7f7edb11d18cac92ae06f1384","first_seen":"2026-05-11T00:12:50.882888Z","last_seen":"2026-07-23T10:00:42.546456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/modules/shared/animations.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.103Z","timestamp":1784800784103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/modules/shared/animations.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 461\r\nlast-modified: Thu, 07 May 2026 20:31:48 GMT\r\netag: \"69fcf6b4-1cd\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"828c15b2a09f6a58295768a10606d515","sha1":"9040c1b04679a16843f4494b1310ad4022a9a389","sha256":"f779d4f49e91d6a331b8f0a82d910db3383622ae87ede9f577566f5b7a459fac","sha512":"c01f9b679d6f4dec3f00c79e108db5b6261d0683f0c7fdcccf4bb7da9ad33f68032fdd23a9eb16e897ce786e7ede3c8638f07717d4c0e43b1d65f08a6f3cbbbe","ssdeep":"","tlshash":"19f0509c48143a110377495188c9b7480676c8d2333318dd66c8028c06807f813db657","first_seen":"2026-05-11T00:12:51.129562Z","last_seen":"2026-07-23T10:00:42.547334Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.405Z","timestamp":1784800784405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2699\r\nage: 24817\r\nlast-modified: Tue, 19 Oct 2021 05:33:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 23 Jul 2026 03:06:08 GMT\r\ncache-control: max-age=86400\r\netag: \"739797800c1ad83ba9a3cdddb9824693\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e813bb2fe72a7a317b92ea146f692ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: OTdPzm1xjAJvPGa8kbAhv1qK89N8y0ywaMIZSReRi5JJLO6rF8uxbw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":3208,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-07-23T10:00:42.548128Z","times_seen":2475,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":13,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-js/template-content/template-content.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.316Z","timestamp":1784800785316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-js/template-content/template-content.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 689\r\nlast-modified: Thu, 07 May 2026 20:31:41 GMT\r\netag: \"69fcf6ad-2b1\"\r\nexpires: Fri, 23 Jul 2027 09:59:45 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":689,"size_decoded":1051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a9d2f8d5dcd32df005d952344002fe3f","sha1":"16cd3abb3fe8b5d530ea15bf079d6acbc90f70f2","sha256":"227f4caf817093c32e1b3fe2e36fa6a7444dea08ad945abf9de8543c64291a61","sha512":"9d4d14038161b9d78dff0488de9802ccbb4a217e1baf315077c4228adc4ef4250ccea85cfc373acf524f63b96faf290f41a1ad3452798f860fab7da249f878ab","ssdeep":"","tlshash":"6001cbb9263c8e7807ba006eb52e2888e77982048b8446d5bc61077c24d05dd22fe24b","first_seen":"2024-08-19T13:40:24.31065Z","last_seen":"2026-07-23T10:00:42.5486Z","times_seen":4,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/01/logo-adgm-1.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.181Z","timestamp":1784800784181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/logo-adgm-1.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf586-f6e\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3950,"size_decoded":2243,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"409de95dc1157e2138e86ca9082e3b69","sha1":"c50a29f870636c2e6e959747261320083a5dc950","sha256":"4a9b9a209723f1f1347189b54311c0bffe4a0b3b3eec3a1e173cd2c1c1f742a4","sha512":"6b86f33b32e97fb2a8782484512b695d048b32e7161ad2886c24209dc04588776af499501c047a9946e70b1c5b649123f6733333b65f9a1e24ef176a375c5e0b","ssdeep":"","tlshash":"1581bad853a963c0f505abbc6b22287d18af3cfa4b65da79c2847e505e7205dc69ccc3","first_seen":"2026-03-06T10:03:01.172448Z","last_seen":"2026-07-23T10:00:42.549394Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/home-financial-institutions.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.198Z","timestamp":1784800784198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/home-financial-institutions.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76822\r\ncache-control: max-age=31622400\r\netag: \"6961ac33-12c16\"\r\nexpires: Mon, 11 Jan 2027 01:45:09 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-a-658544c96f-ps565\r\nx-styx-req-id: ff7b9791-edc5-11f0-a4ce-b2e8d93eebbb\r\nx-served-by: cache-chi-kigq8000053-CHI, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 0\r\nx-timer: S1784800784.254184,VS0,VE2\r\nage: 150865\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e4d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76822,"size_decoded":77661,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x260, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b01b823261965915d9b5d9001fd0b940","sha1":"4d0eff330f3c7ae83fda47a2064860e47c63efe7","sha256":"3f5d38d0b2eeb5a1f3064081eb018c6e316b4e43ea28f657a7a393f89c5e33e7","sha512":"606a240a23d7db732da48f0ad2ffc1bc916d42986ded159c006aa08da65413042008dccfcaa5a8ad2f860362ab4b14f4f6bd89602354d0c84c82cb1df734e8f6","ssdeep":"1536:NhAM4xy7UjWRAQs0Zdd4OfIqzhLmSLaqcL7bitNManyGjSHU6tEXlGi3Wz/:NhAM+bj5QzP/9SSeqcL7b8NMiXjSdqlU","tlshash":"db73125353712f2596e9c9e7a27ff9470081d10a98d583578ebf1c24693bf0aab7c083","first_seen":"2026-05-11T00:12:51.006967Z","last_seen":"2026-07-23T10:00:42.550333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/meta-tax-agencies-1.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.201Z","timestamp":1784800784201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/meta-tax-agencies-1.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16082\r\ncache-control: max-age=31622400\r\netag: \"6961ac3a-3ed2\"\r\nexpires: Mon, 25 Jan 2027 00:55:45 GMT\r\nlast-modified: Sat, 10 Jan 2026 01:32:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-fe4-a-7f76c9f659-kg98h\r\nx-styx-req-id: 6a6147e2-f8bf-11f0-a650-4e571a49a1fa\r\nx-served-by: cache-chi-kigq8000162-CHI, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 0\r\nx-timer: S1784800784.253697,VS0,VE2\r\nage: 150865\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e384c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16082,"size_decoded":16920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7723fb575c69e1fffaca774ab6b489bf","sha1":"1d0b74754425c44881b952d2655c9e73e378f935","sha256":"48689202310ab0decfc53d2ee6e6ad10ff0209ae8104e189fb5e16989ce0ee54","sha512":"d34e234b7b43b6c0795307394892e7d61f6071643ef67fd53b75e8cf3c1d79a3ae4ad3d414e5bb938378e36b34f1328f04b5c801fd1ceb679800209aa96587de","ssdeep":"192:5ujCfbrPzN8BKpcmnch3wsJ+5ibTB0j2Ng8dxxmRZK5qv1QSPQ0BcIGBWLNOZvOg:5ujqPBRRchgCT0khrR5qf7aONO4UkDs","tlshash":"5272c0a140cd125bad24bb7f352d471d198e2ea1cd6059d15b45abcee3621eea02d338","first_seen":"2026-05-11T00:12:50.976021Z","last_seen":"2026-07-23T10:00:42.55127Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/fonts/chainalysis-bold-webfont.woff2","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.747Z","timestamp":1784800784747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/fonts/chainalysis-bold-webfont.woff2 HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":311,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-23T12:12:01.420309Z","times_seen":29747,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/transaltions-C-R9BBi2.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.105Z","timestamp":1784800786105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/transaltions-C-R9BBi2.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/ChainSelectModal-DwW9MO4J.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4bf-1388\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5000,"size_decoded":1654,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a5434989cacfdb90097368c81e198048","sha1":"e04832a1f00ff4d9f03cd41f7e3137d97ee3b94a","sha256":"db1fef39c5c2d2043ec629846d92e2d87fd972bf8ffd2e2d857e6e348732c83f","sha512":"47075662ce3d9cdb1e0fadd1e7826cb76664674559e833b87142ce54d13fb3f4908f3599d3e6c350a22045ddaebf6e45f7ba37e6eed37003a20f28f570e878d0","ssdeep":"96:7RjG4bxGEBuaY74toSli21MaYMY6f2iq+M9EqgK:7RjyaY7+aAI+lqT","tlshash":"4da11db2c98d21641282550fcb577e1f20d604bf9f56733a37d009f57ba622b853b29e","first_seen":"2026-05-11T00:12:39.060797Z","last_seen":"2026-07-23T10:00:42.552249Z","times_seen":4,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.consentjs.datagrail.io/consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/d4c72912-4490-40c4-9df2-908103a2c854/consent.js","fqdn":"api.consentjs.datagrail.io","domain":"datagrail.io","tld":"io"},"ip":{"addr":"143.204.238.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.165Z","timestamp":1784800786165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.consentjs.datagrail.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 05 Oct 2025 00:00:00 GMT","end":"Tue, 03 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:C7:09:8A:85:71:72:66:8B:BF:C4:3F:61:E5:EA:15:21:88:CC:01","sha256":"1B:E7:A3:CB:7B:F5:9C:D3:E2:46:0E:59:0C:F8:B6:72:47:BB:25:23:C4:CF:81:05:F8:4C:34:B3:D8:1A:44:D7"}}},"request":{"raw":"GET /consent/1f6af024-d72f-427c-ac88-91db3d7de6d1/d4c72912-4490-40c4-9df2-908103a2c854/consent.js HTTP/1.1\r\nHost: api.consentjs.datagrail.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 02 Apr 2026 18:08:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4LI.4Ke9vh8WgYvQ0PDwL1jBeO.q2nOm\r\ncontent-encoding: br\r\ndate: Thu, 23 Jul 2026 09:59:47 GMT\r\netag: W/\"2ac7b5ecae0c1723300ba3ebc893975a\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 217e7e1681602f97edd05a1be6d5e5bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: d3EDHPxrtku4c4paz09SJJam_GgcBk8o-0WCT-nUdZaNSmlgya0jaw==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116812,"size_decoded":36424,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65439), with no line terminators","md5":"2ac7b5ecae0c1723300ba3ebc893975a","sha1":"5756dec132e1a310084bfa113076574971618eb4","sha256":"3db32e28c360613a3035c8c13d9905dac94eab5d5eb116bbc1192cc3ab0111ee","sha512":"991707ced4de0920f4fb5cb66afa3c7fcd776c6a5c253ff19b15e6754d7133adf3b2c33d1eb46254ff5ccdf50016582eb6116a869c675271f2ff616faf9a33bc","ssdeep":"1536:uN8Fzi8M3HVI4zQc11x/q9tU6erpBeNsRDWojQmnEFOAAnBohYdQQ:nFGXVI9c1uyB5jQqEFOYwQQ","tlshash":"b6b34cb8a385f13c96b70561b1fd690ab5383805b802ccb5d644dc8639d3fdb27e6b68","first_seen":"2026-05-11T00:12:50.997549Z","last_seen":"2026-07-23T10:00:42.553402Z","times_seen":3,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apivin1.pro/user/metadata","fqdn":"apivin1.pro","domain":"apivin1.pro","tld":"pro"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:46.453Z","timestamp":1784800786453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apivin1.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 19:58:48 GMT","end":"Sun, 04 Oct 2026 19:58:47 GMT"},"fingerprint":{"sha1":"3F:9D:B7:49:88:9E:60:30:AC:D1:7E:5F:E9:9D:1B:89:BD:68:08:41","sha256":"7B:F7:8E:33:A1:63:D6:8B:C7:7E:3C:80:8F:AF:5F:DC:87:8C:79:19:5A:23:41:A7:1A:0D:36:DB:86:2C:78:B0"}}},"request":{"raw":"POST /user/metadata HTTP/1.1\r\nHost: apivin1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nContent-Type: application/json\r\nContent-Length: 358\r\nOrigin: https://chainsalyisis.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":358,"data":"{\"payload\":\"U2FsdGVkX1+quQvFuTtVtdLOiZBWVLWbKxUQByo8lnGMuuZEwo4xhrEkIFqSSHpB2S7ReMtPdbk8IUQ6b2Y/Vb0suJ/3P14i23gud1yuYNpcrVhbDSj3Qo/HCLVPX0EL1ZnxfFvdnEL1zZtDsTvTC4UpXb5R+y0/GulXvDAF7AHWl4f6CnGjxqgQqCnLQhQjdcAWwHF5m97kCWsCOy4XyR3PY7H3lH2HJSDbqIpW/MZ/pAC15PAih422BXAt+fPaKUw8VvTX725WCbNYVtSFgnFLhD06LvgIaPR2TT7ZkU8KxWsdxLTQ3r7O6seOucdcoXCsh6/JAPFJOurp3MOn5Q==\"}"}},"response":{"raw":"HTTP/2 201 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"25-j+e82UeO3VMFYbc+szjb2BzufD4\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37,"size_decoded":304,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7b44f76a4d0f894e15691db9dc7bbeab","sha1":"8fe7bcd9478edd530561b73eb338dbd81cee7c3e","sha256":"1358808f8f7f49131cac1f3c1d9c724e7ad782d371985b92af48d46144d09f95","sha512":"715412ab3678e6a9fc3fcdf75854b0b9745a91710034cf2ab47b20fa790d24f46f37df3a09eac15d8f6f5fa7fce932667071b343691443f98f79239d181a6fd8","ssdeep":"","tlshash":"1080041704001fc4034310157410743551c031c154c01113d01d540fc754c313143340","first_seen":"2024-08-19T17:26:48.429951Z","last_seen":"2026-07-23T10:00:42.554324Z","times_seen":133,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/uploads/2025/02/logo-kraken.svg","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.167Z","timestamp":1784800784167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/logo-kraken.svg HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 07 May 2026 20:25:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf52d-d35\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3381,"size_decoded":1840,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8549fd5282d72cc2b6ca3074c202e0b","sha1":"ad15c1c5134f19d8bd54d7fb2f1987c21221c374","sha256":"fee025fb382ace3efa36cca9d37b2e4606383d6f5d2a4c3f2d50ff003321b69d","sha512":"adc87b8e4d27b74306f8017b54c80d846bafd4dbfbd4543caaadd04910765b1c7e8c60f9a42fcb0961571238371e57a92c8d78fffeea87ca657214965ea8c3df","ssdeep":"","tlshash":"576176d27bcdb3e49553fba1ed50b0313ddb116fe691cb1ac144add2e095228e8a4884","first_seen":"2026-03-06T10:03:01.177208Z","last_seen":"2026-07-23T10:00:42.555241Z","times_seen":5,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2024/09/logo-irs-grey.webp","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.170Z","timestamp":1784800784170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/logo-irs-grey.webp HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3162\r\ncache-control: max-age=31622400\r\netag: \"69725629-c5a\"\r\nexpires: Tue, 08 Jun 2027 03:51:45 GMT\r\nlast-modified: Thu, 22 Jan 2026 16:54:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-5fbd9fdf97-w4j65\r\nx-styx-req-id: 341c4041-6224-11f1-8f8b-deedef2230e7\r\nx-served-by: cache-chi-klot8100112-CHI, cache-bma-essb1270032-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.253797,VS0,VE6\r\nage: 81689\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3162,"size_decoded":3995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03a8de555042ee93e54e1b859233cad2","sha1":"a5383072829b75558018e77a8a964d064117a708","sha256":"519c9a12004c19d09a098585ec1ccfdb797722dec0d49e7956fdbb91af0cc58e","sha512":"77cc1f0c6b8cfe1d5d14b71a5f78e7b99a181958af18d83ef39fc0f552d3faf4d9b9a2453fd6b8a87f9c0abc6ca8b0e315b2ad41f6078ec0f5b16d8245296536","ssdeep":"","tlshash":"da517edbbc16f750d03ea22aea3dc415b0369e2500e2bf516d13595dc9f2ea2c33164e","first_seen":"2026-05-11T00:12:50.948713Z","last_seen":"2026-07-23T10:00:42.556118Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chainalysis.com/wp-content/uploads/2025/10/home-hexagate-1500x1099.avif","fqdn":"www.chainalysis.com","domain":"chainalysis.com","tld":"com"},"ip":{"addr":"104.18.36.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.185Z","timestamp":1784800784185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chainalysis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 03:33:51 GMT","end":"Wed, 23 Sep 2026 04:33:48 GMT"},"fingerprint":{"sha1":"3C:10:49:20:A3:56:D5:66:7B:29:B6:5C:6B:02:AC:FB:3E:5B:DC:5D","sha256":"46:B7:D3:0C:66:C2:A5:8C:45:9C:41:54:F3:7A:24:B3:45:12:B2:C1:B2:00:5E:AD:70:C6:C8:1A:AD:0A:71:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/home-hexagate-1500x1099.avif HTTP/1.1\r\nHost: www.chainalysis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10663\r\netag: \"69725624-29a7\"\r\nlast-modified: Thu, 22 Jan 2026 16:53:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31622400; includeSubDomains; preload\r\nx-pantheon-styx-hostname: styx-us-a-7ffbcf568d-tks76\r\nx-styx-req-id: 2d192474-8679-11f1-8305-42255b1f4073\r\nx-served-by: cache-chi-kmdw8640092-CHI, cache-bma-essb1270021-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1784800784.255209,VS0,VE164\r\nage: 0\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: DYNAMIC\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-ray: a1f9d5856e324c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MariaDB","description":"MariaDB is an open-source relational database management system compatible with MySQL.","website":"https://mariadb.org","common_platform_enumeration":"cpe:2.3:a:mariadb_project:mariadb:*:*:*:*:*:*:*:*","icon":"mariadb.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Pantheon","description":"Pantheon is a WebOps (Website Operations) and Management Platform for WordPress and Drupal.","website":"https://pantheon.io/","common_platform_enumeration":"","icon":"Pantheon.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10663,"size_decoded":11424,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"90fadb09695053e30d8196e85af2f6df","sha1":"0abe79beac7d70b2c7a3c13bc9acbb15e34f399f","sha256":"0f1f93c18be43a55eb8461c2399d1d5ce7c2afa8e5a06e35e9440c424cf6a6b0","sha512":"aca1897ea3eef64b39597fad964632fb57951aad7988738601ce4fcedfd0523cfb99d5ac1771c553988b36c32fde02a907474c401a2ba535c9f448a62a708a26","ssdeep":"192:+Ww8TDqsotYNeLB9fq65Cu3p4NPReepbOWctFh1Q4w8gxxqJbe/9UHZL:m/sotYiqOC0pmeepbHctv1jFacJ6l6","tlshash":"3f22ae447a9c1056f8d61c3ad63e177e2e511f92a1b1c2cde4822b026d42baf52af1df","first_seen":"2026-05-11T00:12:50.963823Z","last_seen":"2026-07-23T10:00:42.55697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.406Z","timestamp":1784800784406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1387\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 23 Jul 2026 02:10:41 GMT\r\netag: \"aef8727bea8367cd9fd252c025b45887\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4e813bb2fe72a7a317b92ea146f692ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 28144\r\nx-amz-cf-id: eAUytcJIqvIFLjWYCK_JghnfzvEzLbOuXZmF0yPCY4Kyvn1DAmJqdg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1387,"size_decoded":1883,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-07-23T10:00:42.557884Z","times_seen":15123,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":12,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/mui-aN3YpZsM.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.749Z","timestamp":1784800784749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/mui-aN3YpZsM.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/integration.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4ba-4bdf2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":310770,"size_decoded":83789,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4178)","md5":"af4e473a276686b0bde13e8de01d6349","sha1":"7ed92de68326c0c9e73f16bf4d2d37d8c8ac59f7","sha256":"551d59ba5f40312bd8b5ac15e655c253cefae3643fa3a795dd573bab5e2186bd","sha512":"3fc6dd7a679df2be1783e663b8fd3fc8d91c1ad545b6b23aee70fe2ad623df372a1d62589a3d96e8faddb570f62ddc7b11fb9d71606020e4d78c2954f3530399","ssdeep":"3072:CpfmmQpzHI4aBX0brnymY/jW+CZpVxc9xacelNvgk:CpZeI44EvujW+yxc9xAlNx","tlshash":"2264c60966f120310513e0b95a1fcd1ab62955076e6efd68badc92682f4d03cd2f3bed","first_seen":"2026-05-11T00:12:38.992437Z","last_seen":"2026-07-23T10:00:42.558353Z","times_seen":4,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/build/index-DikFRP7M.mjs","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:45.781Z","timestamp":1784800785781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /build/index-DikFRP7M.mjs HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/build/index-CA8j3SXS.mjs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datagrail_consent_id=1f6af024-d72f-427c-ac88-91db3d7de6d1.32ceb98d-83af-49b8-b597-496dd402bca8; datagrail_consent_id_s=1f6af024-d72f-427c-ac88-91db3d7de6d1.66d29c03-313b-4bad-90a9-cb26a7ed680e; datagrail_consent_version_s=351e8300-2a3b-433b-9fe1-788eb964db9b; datagrail_consent_preferences_s=dg-category-essential:1|dg-category-functional:0|dg-category-performance:0|dg-category-marketing:0; datagrail_gpc_seen_s=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:23:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf4c6-115c\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4444,"size_decoded":1781,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f17fc008cd8c1422406cc883da2b7c02","sha1":"6faca0c8c767adf8de0393a47fc7e738f0ab5769","sha256":"04f057d10f59523601b217b75f6877420c684820409284ef3fdf2585266d831f","sha512":"7a70720f2c8ee081d88bfa6c52baf27535068ff043a58175f6d6ee80cdb78ee23a4582a19da585143e2a77ab5ec7c3902fb9bfab02ddedd420f90e97192d867c","ssdeep":"96:SevI0l5aeVwWYF1ToTS2qNMnOlLWuAndTPkQ0MPTmXVaRu:zdl5X6zTouxE6LWuAd7kQtTmlac","tlshash":"469123a627fb55744197a15c0a1fd825e124408fa908d8ad3fcc52f08f8d62a8efbfd4","first_seen":"2026-05-11T00:12:51.100381Z","last_seen":"2026-07-23T10:00:42.559171Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/template-css/theme-defaults.css","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.069Z","timestamp":1784800784069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/template-css/theme-defaults.css HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 755\r\nlast-modified: Thu, 07 May 2026 20:31:31 GMT\r\netag: \"69fcf6a3-2f3\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755,"size_decoded":1103,"mime_type":"text/css","magic":"ASCII text, with very long lines (754)","md5":"60534edb9dbed3fab90307bae033bac5","sha1":"220cfcde183a799f2c655d4e3b3999b06bfd324b","sha256":"4f854822684914c29fbee334efe6028708be9e119e1c1db891b923efc7d20b3b","sha512":"01b8e28eec660959b49be75176d63e0d8ac3b1626035e14d3e5612983890003b0d3f11947030745fee865f0f0800e2eb1fd38f0d43bb1ae0844fc0d3231c5108","ssdeep":"","tlshash":"6a019251925e324ac4120c57b6da7f137b4a743e78285963911e895bdcf3d8242c4f39","first_seen":"2024-08-19T13:40:24.301971Z","last_seen":"2026-07-23T10:00:42.55995Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainsalyisis.com/wp-content/themes/chainalysis/node_modules/swiper/swiper-bundle.js","fqdn":"chainsalyisis.com","domain":"chainsalyisis.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainsalyisis.com/","date":"2026-07-23T09:59:44.223Z","timestamp":1784800784223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainsalyisis.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 07:15:02 GMT","end":"Wed, 07 Oct 2026 07:15:01 GMT"},"fingerprint":{"sha1":"C8:A8:72:4F:7A:98:92:90:43:6F:50:DD:2D:1D:7F:FB:91:C9:A0:B2","sha256":"D8:39:E9:78:E7:7D:B0:71:51:BE:D0:E1:F5:A8:CC:58:7A:14:21:E7:04:02:31:B9:D0:76:1E:94:32:67:46:7F"}}},"request":{"raw":"GET /wp-content/themes/chainalysis/node_modules/swiper/swiper-bundle.js HTTP/1.1\r\nHost: chainsalyisis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chainsalyisis.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 23 Jul 2026 09:59:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 May 2026 20:31:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fcf69e-5382d\"\r\nexpires: Fri, 23 Jul 2027 09:59:44 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":342061,"size_decoded":64008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"21762a1ce0a6bbe2429b882da03c2af8","sha1":"68610169735a53fc0c3af9c9d48a7e806d68d5db","sha256":"7353aab4a6c28ee552655a5ab9aa0c3f3537bfa12813c922f68ba1505a5aebd5","sha512":"c16fbd3b739bfe9c8e0e5af479d043ec5e0e369da6aa3f03cb3231df7b80dfcc47f809ae4684d4a06ba4ac15e1a78ecc0368599a86d18ab80bf9c07e4371be77","ssdeep":"3072:+cxTC015fd0Nl6rgDVFaqG7QPNdzW3Ptw46k5d/QQh/eFyEZ:+sC0LsPN05d/QQh/eFyEZ","tlshash":"d1741d0c11b3212501a3796e5faf8405727a9103784ade543e9c8f18efb993856febf9","first_seen":"2024-09-24T10:50:58Z","last_seen":"2026-07-23T10:00:42.560758Z","times_seen":9,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"chainsalyisis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"chainsalyisis.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}