{"report_id":"b2c1a698-3823-4aed-b115-8459346d53f1","version":0,"status":"done","tags":[],"date":"2026-08-15T18:48:10Z","url":{"schema":"http","addr":"onyx-treasury.com/","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"onyx-treasury.com/","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"title":"Onyx Treasury — Private Wealth Vault","dom":{"size":31610,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31519), with no line terminators","md5":"22011bb0407db74009724048f6fc85e9","sha1":"c57499ba20732901c7d80d183e06721f5c46efa6","sha256":"fba3bafc202feba34b115d2faa90875583b0dc7b57a5ead218ee1282b929ae16","sha512":"97d0352362a89fd0b8d5473bd0c08045e53e7875b19dd812993f8c9b930d8361a8c733d8c47ef0bd0628741bc38db991eeca89ecaeaed8666beb624599f4e299","ssdeep":"384:LZK7ZbUerIkvJBW2AgrENJpipycplpUpdpO7u0ENrAX4mN/GnRgsLpdrc6qsKRmt:87/rZXQ0jb+Hw7mq8JPrcfsK+","tlshash":"84e2a671f314157bd22742e8f269f37c11b4d2a8c61787a0baec477913d6d93aa231e8","dom_hash":"domhashca20ae391f40456f8c6fe29db1d9f151","first_seen":"2026-08-15T18:48:16.558026Z","last_seen":"2026-08-15T18:48:16.558026Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onyx-treasury.com/","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:48:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"onyx-treasury.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-15T18:48:11.883539Z","last_seen":"2026-08-15T18:48:11.883539Z","alert_count":0,"request_count":17,"received_data":855800,"sent_data":13366,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onyx-treasury.com/assets/routes-Bv3Uo7oj.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac5983fd55c3896f7b97050f291a08d","sha1":"52103ea19df1d21be8c856dc954bc3414ae69697","sha256":"f8599576838a43753fceae7c2c4fad6174fe295a6d9e579b485900955e9f6bd5","sha512":"254670f3c822eb97f2fa7a6326f9d2f4b05238c9ffdd342fcf6907b86c52076821edb353fb8be33cc18b5a89e3a675476ff8cd3cc794939337f787544674c842","ssdeep":"192:rfTC17YqJHn8djVouc2p0HovTt/ETvKyYNbAvl+IBylquifNW5nocLG1AdnGmB19:rrCKjhldvT2v1M0HsPiFeno2rbm0iYr3","tlshash":"bfa25216f2806ae8f9670464616fd5def65fd098ca0b06b8beb4302525c34ec7717bc9","size":21991,"data":"","first_seen":"2026-08-15T18:48:16.584337Z","last_seen":"2026-08-15T18:48:16.584337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/~flock.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-15T23:16:28.374788Z","times_seen":15582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/index-Co-jIPaz.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6f14c7b4a540f197bc6533bd11b8639","sha1":"d96435eb143330f62dc5354df9397d26ab87b8e1","sha256":"132239053bfafc39ccc3214739adbd6cacef9183b5422e522cb5eddda09031ae","sha512":"d181449df7897146568438dc8028f13d957ed560fac2cdec8a50352c5d12e084de583badde055e5e7145dab611b90de4b56ca52ff60f9fa8d3e105a956069f3f","ssdeep":"6144:zg8I2Hrr9UbFA/a/lkd1mKQ+7x8spbvsI30lkcQ3:E38mK5QkcQ3","tlshash":"1c743be83296b2221bd756b6407f1507b3391867280d4420b224fdef76b188995fbff9","size":346338,"data":"","first_seen":"2026-08-15T18:48:16.589982Z","last_seen":"2026-08-15T18:48:16.589982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onyx-treasury.com/~flock.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.075Z","timestamp":1786819654075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e55fa2256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-15T23:16:28.374788Z","times_seen":15582,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/cormorant-garamond-latin-400-italic-Dc_OZ8oc.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.420Z","timestamp":1786819654420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/cormorant-garamond-latin-400-italic-Dc_OZ8oc.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23660\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e581c4756aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23660,"size_decoded":24135,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23660, version 1.0","md5":"aa6bdaf51a40d3bdae4a556e49c6630a","sha1":"810fe6ac9e1859d5f6f43699ab163ed825e16340","sha256":"e48e58027030df56869b795ca6f19b7012158275f7ad7cde1900b4a0b68d02e2","sha512":"881643cd012e1642845bf246333039ff09712b4abc5df9533672e5ab1f0a9755c8fd199ff633f75188e4344d705f428864b0c7b52798e03dabdbcb4dd93ae609","ssdeep":"384:v3ROQtc4Yir+abTpROaas7a84RiK/S9brBhyC0losNmQSJDhK/IuL8Cc67BMCALB:vJYir+ayXy9brBhyC0yFKAuLpBMCASqb","tlshash":"81b2e12cc16cd538d83e6cf23c4f49d89ba3eb2855426ad187396c1f03bca6f0da2951","first_seen":"2025-09-11T12:25:45.35096Z","last_seen":"2026-08-15T18:48:16.567285Z","times_seen":553,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/inter-latin-400-normal-C38fXH4l.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.422Z","timestamp":1786819654422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/inter-latin-400-normal-C38fXH4l.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23664\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e581c4956aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23664,"size_decoded":24139,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-08-15T22:41:11.227577Z","times_seen":17340,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/cormorant-garamond-latin-400-normal-B-1hWBU7.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.424Z","timestamp":1786819654424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/cormorant-garamond-latin-400-normal-B-1hWBU7.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22876\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e582c4a56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22876,"size_decoded":23351,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22876, version 1.0","md5":"87d22046a89f9ecddad3dbeae88551a6","sha1":"a65125bc131b7c0e2fb1a140aae8bffc615e679a","sha256":"8048ac209bec741e1c29cd0cfac5aac1c0c2ba8c3ddbd4a58fa9bd92ef5c63c2","sha512":"2675bdbe8a03efba4746c1af10778a84c1f2271eb8f3342be771c61c4eac3a20814000aa47083b41cc766954e1e8feeb13e0b2483347b1a69975cf61a863812a","ssdeep":"384:3GKsD/08uU1UUuKPS7Q7+MIkK0lbAvnNW0LEQWo195cjIvvl2ODuJrsXjA9Wl7C1:S0/UaUha7g+P+MvI0CaQIF2WXTAsOKzi","tlshash":"d8a2d1f2d2911997d88b67fd2a970cb3e7d6845303fef3c9dd5618c12068a1755183c1","first_seen":"2025-09-11T12:25:45.431336Z","last_seen":"2026-08-15T23:06:00.288802Z","times_seen":634,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/step-wallet-DdeIyKwl.jpg","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.435Z","timestamp":1786819654435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/step-wallet-DdeIyKwl.jpg HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41590\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e583c6256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41590,"size_decoded":42065,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"ad9d90063b479581db122a457019e94e","sha1":"fa29f750a407cefa9d7b8fef994e6f651ef1fb6c","sha256":"dc8ca78a5df721e21872e3ffddb1d2932dfddc31ea9a35004bf96eb98bdc4f55","sha512":"1430539fb0e71b68f851ec0df4da7d5043d4d033b1183d400b962ba860a2c4265ee4c4736cbbfc8e2efc4918f8579d7b1a3537e61c42244e238d77456aaedf61","ssdeep":"768:24kNXX02XHWh47T+Ir0sY+iWBCOFVE5JswyGBORc3m:240XdXI43Fr0sYOgaSgwBYym","tlshash":"a0139e17ed0aaf83953ac3fc7f434eae8615374d9d9636ea5123ce9738646200c9a439","first_seen":"2026-08-15T18:48:16.574118Z","last_seen":"2026-08-15T18:48:16.574118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/favicon.ico","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.549Z","timestamp":1786819654549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e58ed3156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2980,"size_decoded":1601,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"f79c38405cdc1f9d55d1dc5675b91bba","sha1":"3b7195c73e3136b5d7187797c869f2197420227a","sha256":"ac6c6e7b6d9c695b0ec1c74f63114e4b6fce3548114fc5935df24652897ae075","sha512":"12464522975d1f9a9957e97bbe04d53232964af8d15567bae98888202af31652f5316e169d746f413b7d033e6c7f4781779297c5a50e08ad1693404362b1ed41","ssdeep":"","tlshash":"4351a7770a104a2a4b66a6b984317296c7f9d90dd7acef28f5edb09e5bc1dc24077320","first_seen":"2026-08-15T18:48:16.576981Z","last_seen":"2026-08-15T18:48:16.576981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/~api/analytics","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.751Z","timestamp":1786819654751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://onyx-treasury.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU; session-id=5a345da1-3d35-46a9-97da-7e4f1fec9e41\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":338,"data":"{\"timestamp\":\"2026-08-15T18:47:34.748Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"5a345da1-3d35-46a9-97da-7e4f1fec9e41\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://onyx-treasury.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2ba5e5a2e8556aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-08-15T23:16:28.369088Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:47:33.351Z","timestamp":1786819653351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU; HttpOnly; SameSite=None; Secure; Path=/; Domain=onyx-treasury.com; Expires=Sat, 15 Aug 2026 19:17:33 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e51cd5456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1","quoted":false,"path":"/","raw_expires":"","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU","quoted":false,"path":"/","domain":"onyx-treasury.com","expires":"2026-08-15T19:17:33Z","raw_expires":"Sat, 15 Aug 2026 19:17:33 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU; HttpOnly; SameSite=None; Secure; Path=/; Domain=onyx-treasury.com; Expires=Sat, 15 Aug 2026 19:17:33 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33469,"size_decoded":7698,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"ff625e2980b2ebcd0734629b34b39344","sha1":"c04d09dde66fbaeae37da2d0e53dc92f8cd5e497","sha256":"1af741c8e0359e9943eaad8293d176c552fbe2d107355bd5d969bf45b56f8700","sha512":"19ea829905c6ae3af1c60440c10f13eb39768426619f179f818e358915b51212ea1b9189e4105a9ec12308599556c8e72e911e35f5546f02cd3cc65a22890c17","ssdeep":"384:FZK7ubUeiJtv+BX2Agr3NJpipycplpUpdpOb0ENrAX4mNeGnRgsL2dr+fqsKRmbj:m72inXf0jb+HwzqJJUr+CsKp1a40","tlshash":"89e2b871f310157bd22b42e8f265f37c11b5d2e8c61787a4baec467913c6d93aa231e8","first_seen":"2026-08-15T18:48:16.580122Z","last_seen":"2026-08-15T18:48:16.580122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":37,"connect":1,"send":0,"wait":397,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/styles-D-YGMEBw.css","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.066Z","timestamp":1786819654066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/styles-D-YGMEBw.css HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e55ea1c56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81733,"size_decoded":13867,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"eca7d6e81b81066856e68495f850b947","sha1":"d15c3e110595a2e24cfca66c650713ffd4a4ffa1","sha256":"c4cb08e698e8bccde138c4c6db9b353cfb1c1c998c9812bb233f70fdba3d9180","sha512":"960304f051143572d154354b5c5dd88daf09c73b7b53ab22e4ae897727f0e7103492f5f150767e0f78e562f90f49d7fe86e597186758ce9ac6b1b5bf4e485449","ssdeep":"768:xESzM9tVdXFJ8h+EDZhrW+hElQlSWpn4kTXaXfPHr0zjs1L9xujTWHwWZaXpFR:+iMhdX8h+wr+yvXifwMDxcLRJ","tlshash":"4583d950b22ad83efc73a8a163cc7c4d5509b090ed3541e5ee1621225edbbf78aa573c","first_seen":"2026-08-15T18:48:16.582264Z","last_seen":"2026-08-15T18:48:16.582264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/routes-Bv3Uo7oj.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.070Z","timestamp":1786819654070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/routes-Bv3Uo7oj.js HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e55fa2056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21991,"size_decoded":6468,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (16208)","md5":"4ac5983fd55c3896f7b97050f291a08d","sha1":"52103ea19df1d21be8c856dc954bc3414ae69697","sha256":"f8599576838a43753fceae7c2c4fad6174fe295a6d9e579b485900955e9f6bd5","sha512":"254670f3c822eb97f2fa7a6326f9d2f4b05238c9ffdd342fcf6907b86c52076821edb353fb8be33cc18b5a89e3a675476ff8cd3cc794939337f787544674c842","ssdeep":"192:rfTC17YqJHn8djVouc2p0HovTt/ETvKyYNbAvl+IBylquifNW5nocLG1AdnGmB19:rrCKjhldvT2v1M0HsPiFeno2rbm0iYr3","tlshash":"bfa25216f2806ae8f9670464616fd5def65fd098ca0b06b8beb4302525c34ec7717bc9","first_seen":"2026-08-15T18:48:16.584337Z","last_seen":"2026-08-15T18:48:16.584337Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/step-biometric-Cd4ioL8D.jpg","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.434Z","timestamp":1786819654434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/step-biometric-Cd4ioL8D.jpg HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37805\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e582c5856aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37805,"size_decoded":38280,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"4c85abdd1b8cbe8926202a00d1f39c30","sha1":"33a162eb9b502a64f72590338fcfdf95b24388e1","sha256":"16a36c10cc4a77d50af749b044fedabb850d108acb186e4aee3bfb31500b1b27","sha512":"fdda9d49d0329b78fbeeff0b234cb66e595818c7fc8c65f43ed03649140b278c3b57e9a40159073bf01e39ccb7f9faba4ac506f98f46f487eee2c79141da2e6d","ssdeep":"768:2BL0nvJMJ0g7zrGd1hSYkpXjAJxt/ukrgdLQwGoi4SbzfiNYCXzf1oxU6bWtxxa:2Bav60gLy1STAxRrgd8wGGkfiN1jCvbZ","tlshash":"42036c23ad5a2b53a518c7f8bf434dddab18670c6cc622fe11678ecb3c606180d5e56e","first_seen":"2026-08-15T18:48:16.586306Z","last_seen":"2026-08-15T18:48:16.586306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/step-tap-BbF0yddd.jpg","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.432Z","timestamp":1786819654432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/step-tap-BbF0yddd.jpg HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38531\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e582c5656aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38531,"size_decoded":39006,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"a6ee5f8a663b831d519bb5ddaa93f384","sha1":"086a8ef15c8a9cf83dfe1db353c28250fcf41c74","sha256":"fc28a2b7dee4f3788595cc092cfad3fe7f22ed2f18261cc1d054cdfb6aa9bee3","sha512":"4efc8f1f479864433464afca2c705e8bdc5b2801b64e060968a326e2539e34bb2cf91f7234c439fd12882758a94b6db4064feb583a962d178778d9bd35fcee5b","ssdeep":"768:2azGWoRsUOo+aHXOBrweQa82QQ3p1jggxV5I1m9M9:24GWoRsuXOBPQlVQZ17Vam9M9","tlshash":"850397039d18df83912987e4bf034eac6b563b1de99139ff15624ecb3e606625c9d02e","first_seen":"2026-08-15T18:48:16.588206Z","last_seen":"2026-08-15T18:48:16.588206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/index-Co-jIPaz.js","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.067Z","timestamp":1786819654067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/index-Co-jIPaz.js HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2ba5e55ea1d56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346338,"size_decoded":107578,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44052)","md5":"d6f14c7b4a540f197bc6533bd11b8639","sha1":"d96435eb143330f62dc5354df9397d26ab87b8e1","sha256":"132239053bfafc39ccc3214739adbd6cacef9183b5422e522cb5eddda09031ae","sha512":"d181449df7897146568438dc8028f13d957ed560fac2cdec8a50352c5d12e084de583badde055e5e7145dab611b90de4b56ca52ff60f9fa8d3e105a956069f3f","ssdeep":"6144:zg8I2Hrr9UbFA/a/lkd1mKQ+7x8spbvsI30lkcQ3:E38mK5QkcQ3","tlshash":"1c743be83296b2221bd756b6407f1507b3391867280d4420b224fdef76b188995fbff9","first_seen":"2026-08-15T18:48:16.589982Z","last_seen":"2026-08-15T18:48:16.589982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/onyx-card-hero-8ciXaadK.jpg","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.082Z","timestamp":1786819654082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/onyx-card-hero-8ciXaadK.jpg HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onyx-treasury.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96393\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e55fa2d56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96393,"size_decoded":96868,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"49f82587633c39f57f196a9c2d034a28","sha1":"a22819451344ab712f0124415f88c44786b326da","sha256":"806fe06f312f1564c8a0c12cd6173bd17a5cd20698c92b270f3c907a427cb130","sha512":"de628bf2f38ddab06469e0f0c86fc1cb7a3931a3861da31df1210d2b4b6618816709d22cf8749b9dff0b6caef776e59316015fcb112804f74a3309aea5699849","ssdeep":"1536:TdZl3dpIZlI/s3Sb/dnoV0z3NIYQX/Q7DG0DnAU6VgGvjuwoIv7enDAy5LLPLvYO:HZdpYlI/s3SbFnw0rNLQXIlnPv4opDAg","tlshash":"0a936a570e1866c2e43c46f4bd534fdc6e223f89e8922cef54160f9a79b0a271d4e16e","first_seen":"2026-08-15T18:48:16.591998Z","last_seen":"2026-08-15T18:48:16.591998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/inter-latin-500-normal-Cerq10X2.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.417Z","timestamp":1786819654417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/inter-latin-500-normal-Cerq10X2.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24272\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e581c4156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24272,"size_decoded":24747,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24272, version 1.0","md5":"51205681a1ba304816fc629e8989256b","sha1":"6b66c741bf8bc3ce248af04b2051a648a38391d6","sha256":"f3779f1efccc4bdcdf9c0a02ab95bf6bd092ed09c48c08cedc725889edd1d19f","sha512":"06a0f1bb5df53f0f01a69fcde97dac63e6cf382bdc38ac84cde4021c8f38f8998c525b564c24fc9caa47fa7253a1b8eb1f50093b9d6b858ac59f358d08285ac8","ssdeep":"384:G+N/IC1hZek0x7rvoWFOdMoldqrE4Fc8BGW8CqKiLIPGFpLDK12JBoB/cYGnIYz+:GpAhodx7DXOdMcsZF38M58p212JBoiYp","tlshash":"f3b2e02211fa659d906a131e29fd782b77bb373d3940cc8aa86f49cd9dc675308c5cd8","first_seen":"2025-06-02T05:01:52.622319Z","last_seen":"2026-08-15T22:41:11.224114Z","times_seen":5862,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/cormorant-garamond-latin-500-normal-BsRWmXhO.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.418Z","timestamp":1786819654418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/cormorant-garamond-latin-500-normal-BsRWmXhO.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23312\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e581c4456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23312,"size_decoded":23787,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23312, version 1.0","md5":"efeea72c7a42e5357e6b27f27634f4cb","sha1":"c20b57f6f4e8efd9971192771cd88596d52e84e9","sha256":"8197bf53615ddc8c423f444c7f0eec63b7fa0ba093fcfbec60dfdd28429b0fc8","sha512":"eb98ffe7dc327a5ca0c26c12610c4ddcc10f804551d2c625f62ee729415110b683aa3ffb99d6e3b5c67c6ca7f06f91a99d171b66137231bfe5287e1aaf1be52c","ssdeep":"384:Leyqa/z+ZU0egibmZu4Ig0R9aGShx1A+889gUhNIhT3FfsEvvX075nnwapNqO:LqarfZgEmZP0RJ89Vfm1fsEXXopNj","tlshash":"29a2e0022b8353047bcb1a75fb78a76a582522c8a9198fecfb0715dc1a1bf61384cf1d","first_seen":"2025-09-19T16:16:04.757901Z","last_seen":"2026-08-15T18:48:16.594899Z","times_seen":208,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-treasury.com/assets/inter-greek-400-normal-B4URO6DV.woff2","fqdn":"onyx-treasury.com","domain":"onyx-treasury.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onyx-treasury.com/","date":"2026-08-15T18:47:34.427Z","timestamp":1786819654427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-treasury.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 07:02:05 GMT","end":"Wed, 11 Nov 2026 08:02:01 GMT"},"fingerprint":{"sha1":"50:FF:15:99:81:CC:23:3D:7A:9A:5D:EC:A5:6A:2D:05:3A:D8:81:FF","sha256":"52:89:10:A5:C3:A9:E7:D7:4A:F0:D3:F2:5D:C1:D9:65:82:F8:DF:15:57:86:CC:36:82:78:4C:D5:85:04:58:69"}}},"request":{"raw":"GET /assets/inter-greek-400-normal-B4URO6DV.woff2 HTTP/1.1\r\nHost: onyx-treasury.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://onyx-treasury.com/assets/styles-D-YGMEBw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1; __cf_bm=RX2PtaE.lkupLm4SlQz036u5XSs5qAJS4c4CjHL4XD8-1786819653.4074535-1.0.1.1-VNnr2Loc85MnAxaIlh12bI.0OTEP5K6M6IsP5mCcCh9H9AZ4Z7DsyhC2nIpbmPp2YKzaFN7qJQHk3h4KhnuCryuL1XUrFhZkclPOKarvKA_DzW12k85I.GSogCaROBsU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7776\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 759a87a061ab7e84fd4c1a72f192758f694ecdfa17b0c5180c2feb006bb20ce1\r\nserver: cloudflare\r\ncf-ray: a2ba5e582c4d56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7776,"size_decoded":8250,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7776, version 1.0","md5":"e4998c9e328a3b87ba9fb11e39a5e9b1","sha1":"85ad3a879941ee7c6e5af34a7fad437277357752","sha256":"c15ddd00a9927b56f5c655a41f976f79bd848a20cce91fc14227751872a1cc27","sha512":"d9e98cf2d1231e07a1752cd16c2c8e40f3a1922c65884098aa4ddb97ca03d1a142be0f1ef0ba123346dc5e25dd450b448bdf668387307a511000b1a9401c130e","ssdeep":"192:rrVsTTJ9JCEeI+EgWj/cm8EBttASAxVd1:/VG99wI+En/tljAxN","tlshash":"35f1bf0540e84b4993dc9d6793b318070007dda63577cae8e8b7d6135ed1993de8af0a","first_seen":"2025-10-01T01:47:26.681909Z","last_seen":"2026-08-15T18:48:16.59557Z","times_seen":77,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}