{"report_id":"bb6cb5a3-9215-4c69-84b8-6acdde3c2c5c","version":0,"status":"done","tags":[],"date":"2026-10-11T08:35:20Z","url":{"schema":"http","addr":"onchaindiagnois.com/","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":0,"asn":63018,"as":"Dedicated.com","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"onchaindiagnois.com/","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"title":"OnchainDiagnois","dom":{"size":64526,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (568)","md5":"876cea938a3003c6f6b666b5ec50a8f0","sha1":"78e4ebcad04a11fc85e67145cb197776ca5548b4","sha256":"fc107294ef1141d39e50ae9f909074d8a8e4bf475315d2a2b99d460f45f94468","sha512":"90fa5ec13585beb2f4a7f9c6df14472b44f6ca201e04f8d7699cb65d6a6474ae521967912a2754b2a8951cf9bb666b1d7f9668012301a863b3451164b8922ce1","ssdeep":"1536:Tt2EJt/qFfv4fkl1Vx7OCubHmcbZ9Cl2uxoqmMnCqCXFMnUqTJk7niqTJ7lBJ:Tt2EJt/qFfAKECujmaZ9Cl2u7mMnCqC/","tlshash":"3e531ab2d26124343377848639c7276f70205407c58a8664baad81e99fdbee7e77338d","dom_hash":"domhash202708f4b0f0c90c6305052f5a6bac0b","first_seen":"2026-10-11T08:35:37.641175Z","last_seen":"2026-10-11T08:35:37.641175Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onchaindiagnois.com/","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":0,"asn":63018,"as":"Dedicated.com","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T08:35:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"onchaindiagnois.com","ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":115580,"sent_data":3350,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":541521,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":1,"received_data":761189,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z5Z5PMGG0N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb04da1e2c3f2a1c0d1733f06d0c36c9","sha1":"1d21b4211b42b10544f79fc19ab829d0aec8a8b1","sha256":"9fe022a57bc09c2102b81bfb1c8c919e533c4f97e9b00e2793ef2ee0c2b0ea98","sha512":"bd0bbebaf9e4a3328b9a997582c694e16720c9eff60ea95c88a239468562913d83bc5dd4e8ff3b83ea62026a18f4345c0dcd90a9c91698589829bc2f31a5ccbd","ssdeep":"6144:/8lsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:/iEKmWJmc/Wu","tlshash":"05b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","size":540917,"data":"","first_seen":"2026-10-11T08:35:37.649323Z","last_seen":"2026-10-11T08:35:37.649323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"efe2affd0b0aa59577529d89fbc8932c","sha1":"699e63ce7e1cbd03b7c048c975b4309dfb8d366e","sha256":"316fa3c6b65c624b7e2da8a909cde218b2bb01596921cefe42799c4fcf570f22","sha512":"c37b1e53ac7310d939692c18700027acdaeb10234366027459fe5f7277f97c45cc7ec690eff85bba1e9287f1896bf8d5ad2d5132f7738e1fc5e939dc1913dd63","ssdeep":"768:UKtYFq4d5qrl1UNk5lx7O3yD6nbHQVclileZ9Cl2uhboqmMnCqCXFMnUqTJk7niM:3l1Vx7OCubHmcbZ9Cl2uxoqmMnCqCXFR","tlshash":"fef2c7e6e3a32434037704891a5b23257421510b95c9c460bfacc5a96feef67e6733ee","size":35917,"data":"","first_seen":"2026-10-11T08:35:37.668426Z","last_seen":"2026-10-11T08:35:37.668426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-10-11T08:35:37.650439Z","times_seen":4173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/wallet-connect.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11d68c34305608b65f2e66f92650dec9","sha1":"8323cf2a6636079a5296128c8977d78371238c45","sha256":"08f8abc6c5ad630879161295c51249956c14cfe53b0b2d607a56474c2ee926e8","sha512":"f15d8ce7964c358604718f9d551d42a2aaff11e46c0204f8531dc0f7ebe1d69525a7d5057528113e90b6bb58395cd19b690b235c7a9f708630f7ff8b11c89490","ssdeep":"192:jrIiH/apz1BeGjmgJtHojY0cVtwPdfbzKRP5GGAyqp3PPdEBCXTPcQo8C1aUalUz:j0LJ7tHojJcVq8GGcZdEB88HbCuVEvI","tlshash":"cc92c452a3906029277b47ea3b036fa8fa500413d661425636ecc3658fbbf52d277bcd","size":20432,"data":"","first_seen":"2026-10-11T08:35:37.663997Z","last_seen":"2026-10-11T08:35:37.663997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/tokens.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30e2c20c065a7693e4503956ca23a80","sha1":"a554d9fe9eaa6847e329a16a60c0ad2d6628719a","sha256":"6b3bb07fa60dd209787afcd886dce5c4372b0f1c8db8593fb5b1ae440d3e343f","sha512":"2aa5c6d73842065855e889b9cca652cf2c990316c8fc62431668199c1349e07844417797de40ed976b268f33e8891db2bf8dc61104edb2300d79950ddb061543","ssdeep":"384:JmINvVjgyTorBHn8ss0NCbcsb2/TPLyIMwq8xOHpX0F4EO73Ck:AINvVjgyTMBHn8spNicsb2/TP2wq8xs9","tlshash":"326222bcc174e859933592ea23276704d742da8b608f1ac1f57fc8b97fbd780941816e","size":15522,"data":"","first_seen":"2026-10-11T08:35:37.651572Z","last_seen":"2026-10-11T08:35:37.651572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/token-scanner.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f6e09fa94d26052186c76eb028e61c","sha1":"ec2fcfb412e3ca9fede3bd8856e51a701484e2b3","sha256":"fd0e34574deae10bd8a1a255607e02b04e4f84cee09870de380dd35741d17f31","sha512":"ed082bbb765737dabf31a6d61df44fb0fb96d5d1ccd6f436917afb7343965135b6fc021cec5e74c35940b30071e5ca114bebace66e097d44fdfb379035365474","ssdeep":"192:Gb6AW4riz0u5Vl2/hjAoHWizi+RNHwdvGHk:YKZ26o2eDQh","tlshash":"16d162a456213055037022ed4fab4256f718a6d7d24d825a7abcc3453fb13268af2eef","size":6746,"data":"","first_seen":"2026-10-11T08:35:37.645202Z","last_seen":"2026-10-11T08:35:37.645202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[TokenScanner] loaded — Ethereum-only, Blockscout source","filename":"https://onchaindiagnois.com/token-scanner.js","line_number":212,"column_number":11},{"level":"log","text":"Loaded config: chain1tokens:50| mode:deferred","filename":"https://onchaindiagnois.com/","line_number":411,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"onchaindiagnois.com/token-scanner.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:52.688Z","timestamp":1791707452688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /token-scanner.js HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:53 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 6746\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 08 Oct 2026 16:39:21 GMT\r\nETag: W/\"1a5a-1a11c6237f9\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6746,"size_decoded":7085,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"78f6e09fa94d26052186c76eb028e61c","sha1":"ec2fcfb412e3ca9fede3bd8856e51a701484e2b3","sha256":"fd0e34574deae10bd8a1a255607e02b04e4f84cee09870de380dd35741d17f31","sha512":"ed082bbb765737dabf31a6d61df44fb0fb96d5d1ccd6f436917afb7343965135b6fc021cec5e74c35940b30071e5ca114bebace66e097d44fdfb379035365474","ssdeep":"192:Gb6AW4riz0u5Vl2/hjAoHWizi+RNHwdvGHk:YKZ26o2eDQh","tlshash":"16d162a456213055037022ed4fab4256f718a6d7d24d825a7abcc3453fb13268af2eef","first_seen":"2026-10-11T08:35:37.645202Z","last_seen":"2026-10-11T08:35:37.645202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":138,"send":0,"wait":140,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/api/auth/me","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:53.676Z","timestamp":1791707453676,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onchaindiagnois.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5Z5PMGG0N=GS2.1.s1791707453$o1$g0$t1791707453$j60$l0$h0; _ga=GA1.1.1183792475.1791707453\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_Z5Z5PMGG0N","value":"GS2.1.s1791707453$o1$g0$t1791707453$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1183792475.1791707453"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 23\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"17-CKRKwZojh3x++ZK8MLCU4rCseSc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":266,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"28ceea71576ab44f2111d0adf10b0de6","sha1":"08a44ac19a23877c7ef992bc30b094e2b0ac7927","sha256":"66ab3448fee11aa381d00e428f98df00da5ff001fddce744711e059bcbd13de0","sha512":"40920ab407f85628e44e1a535234128d21e8507b000084a1fe4f470e8ce737fe3fe205d3431cf67754e3316da901b0df3cbb6db734891f1479a7d6c654a9c368","ssdeep":"","tlshash":"717000008c0a0020a00002020000ba0a0a2e00b302000888a028aa0002a802a202380b","first_seen":"2025-10-18T11:02:56.971332Z","last_seen":"2026-10-11T08:35:37.646782Z","times_seen":64,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T08:30:51.434Z","timestamp":1791707451434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sat, 10 Oct 2026 11:54:51 GMT\r\nETag: W/\"1006b-1a125aa77a7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":65643,"size_decoded":21009,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (568), with CRLF line terminators","md5":"44b26eaee0564dbea5d3df4e43491668","sha1":"98e3148af2c1d2d239f123c9cebbc75e3c27cf69","sha256":"78ddcac338d0cdfc9e4d66bd13c148870e89329d1bd2bac3188d017e37446714","sha512":"2caa71ee31e2c35f16d625090973b4db4cdfe67b36f14638c08206678b59c95371293d419847a0416394c515514c9c0d781be36c6a06c217f2e9672ad556a3bc","ssdeep":"1536:N6gqZHqCTXEzqwdro5WWwxbCeV/kXS2GCqXjLYQZhUvOv7VvkvOX7OIG6OZ7OIau:N6PZHqCTXEz7droLjeVMXPGCqXjsIUvf","tlshash":"d4531972d2412534333384867a92276ef8204107c6864764babd81ea5ffbea7d7737c9","first_seen":"2026-10-11T08:35:37.64804Z","last_seen":"2026-10-11T08:35:37.64804Z","times_seen":1,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":0,"dns":12,"connect":137,"send":0,"wait":274,"receive":2,"ssl":284},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z5Z5PMGG0N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:52.679Z","timestamp":1791707452679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-Z5Z5PMGG0N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 08:30:52 GMT\r\nexpires: Sun, 11 Oct 2026 08:30:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 180271\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":540917,"size_decoded":180875,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"cb04da1e2c3f2a1c0d1733f06d0c36c9","sha1":"1d21b4211b42b10544f79fc19ab829d0aec8a8b1","sha256":"9fe022a57bc09c2102b81bfb1c8c919e533c4f97e9b00e2793ef2ee0c2b0ea98","sha512":"bd0bbebaf9e4a3328b9a997582c694e16720c9eff60ea95c88a239468562913d83bc5dd4e8ff3b83ea62026a18f4345c0dcd90a9c91698589829bc2f31a5ccbd","ssdeep":"6144:/8lsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:/iEKmWJmc/Wu","tlshash":"05b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","first_seen":"2026-10-11T08:35:37.649323Z","last_seen":"2026-10-11T08:35:37.649323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":43,"receive":49,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:52.683Z","timestamp":1791707452683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/ethers/5.7.2/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 08:30:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1515848\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 20 Oct 2022 04:30:31 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZBjj7jmaZahxvRM0YD98laGAUCFP1V0qlzvMffgk0IwpGVuL8TEwjpxsMqCWA%2BoCl2Zotat00%2F2fzcWadkxaSCkWdkwaG4a78DbsGbRoLSQ5Wv51w0eqAxzlNBM8KvaM9hF7hoM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a48c815b690c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 139139\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":140157,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-10-11T08:35:37.650439Z","times_seen":4173,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/tokens.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:52.686Z","timestamp":1791707452686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /tokens.js HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:53 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 15526\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 08 Oct 2026 05:44:14 GMT\r\nETag: W/\"3ca6-1a11a0a7288\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15526,"size_decoded":15866,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d30e2c20c065a7693e4503956ca23a80","sha1":"a554d9fe9eaa6847e329a16a60c0ad2d6628719a","sha256":"6b3bb07fa60dd209787afcd886dce5c4372b0f1c8db8593fb5b1ae440d3e343f","sha512":"2aa5c6d73842065855e889b9cca652cf2c990316c8fc62431668199c1349e07844417797de40ed976b268f33e8891db2bf8dc61104edb2300d79950ddb061543","ssdeep":"384:JmINvVjgyTorBHn8ss0NCbcsb2/TPLyIMwq8xOHpX0F4EO73Ck:AINvVjgyTMBHn8spNicsb2/TP2wq8xs9","tlshash":"326222bcc174e859933592ea23276704d742da8b608f1ac1f57fc8b97fbd780941816e","first_seen":"2026-10-11T08:35:37.651572Z","last_seen":"2026-10-11T08:35:37.651572Z","times_seen":1,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":2,"connect":138,"send":0,"wait":281,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/favicon.ico","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:53.353Z","timestamp":1791707453353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:53 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":150,"size_decoded":448,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-10-11T11:48:01.155099Z","times_seen":10551,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/api/config","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:53.432Z","timestamp":1791707453432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onchaindiagnois.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 4893\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"131d-miZWA07H7Vms+ms/DIDs4oUxerc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4893,"size_decoded":5140,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5777cbe71106c9d0d4fb7d995ae0d5a9","sha1":"9a2656034ec7ed59acfa6b3f0c80ece285317ab7","sha256":"cf8ea1a57d62946c56d7c50ec0a1bfdd5c5ce9cb2d896288db4ed30e811a5846","sha512":"cd5708326e7557535410bac99d35f3bb8712ef6fcf75658b5e8592fef667a661bdcc2829991cd4d6599f3d02ed0ce9c8c4ff3a2010d8ef3f34c11cc44cd8e114","ssdeep":"96:zSIGJcwINnhzgMUl9M5B5G4vFBTMhfPCE7:zFGJcrnBUb2B5G4vwh3CO","tlshash":"36a187b2a724643f4e29678125fd3a3c51c221e2cd980489d85a4d7f53e6e76582f33f","first_seen":"2026-10-11T08:35:37.660516Z","last_seen":"2026-10-11T08:35:37.660516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchaindiagnois.com/wallet-connect.js","fqdn":"onchaindiagnois.com","domain":"onchaindiagnois.com","tld":"com"},"ip":{"addr":"216.146.25.233","port":443,"asn":63018,"as":"DEDICATED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchaindiagnois.com/","date":"2026-10-11T08:30:52.684Z","timestamp":1791707452684,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaindiagnois.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 16:18:30 GMT","end":"Wed, 23 Dec 2026 16:18:29 GMT"},"fingerprint":{"sha1":"2C:FA:1E:62:8D:11:32:5E:AC:E3:96:DF:53:E0:90:C5:F9:92:17:A1","sha256":"94:91:23:4A:3F:DE:BE:CC:61:13:E1:56:D7:32:41:9B:D0:82:75:34:FD:15:11:2C:24:92:61:93:11:DC:4F:E5"}}},"request":{"raw":"GET /wallet-connect.js HTTP/1.1\r\nHost: onchaindiagnois.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onchaindiagnois.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 11 Oct 2026 08:30:52 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 20444\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 08 Oct 2026 05:53:07 GMT\r\nETag: W/\"4fdc-1a11a129449\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20444,"size_decoded":20784,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (379), with CRLF line terminators","md5":"11d68c34305608b65f2e66f92650dec9","sha1":"8323cf2a6636079a5296128c8977d78371238c45","sha256":"08f8abc6c5ad630879161295c51249956c14cfe53b0b2d607a56474c2ee926e8","sha512":"f15d8ce7964c358604718f9d551d42a2aaff11e46c0204f8531dc0f7ebe1d69525a7d5057528113e90b6bb58395cd19b690b235c7a9f708630f7ff8b11c89490","ssdeep":"192:jrIiH/apz1BeGjmgJtHojY0cVtwPdfbzKRP5GGAyqp3PPdEBCXTPcQo8C1aUalUz:j0LJ7tHojJcVq8GGcZdEB88HbCuVEvI","tlshash":"cc92c452a3906029277b47ea3b036fa8fa500413d661425636ecc3658fbbf52d277bcd","first_seen":"2026-10-11T08:35:37.663997Z","last_seen":"2026-10-11T08:35:37.663997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"onchaindiagnois.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}