{"report_id":"d79c4082-8269-4a89-a83f-9abe5e3a33a0","version":0,"status":"done","tags":[],"date":"2026-07-26T13:49:50Z","url":{"schema":"https","addr":"governances-onyx.com/","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"277a800d28ca620076479614e22cbdc9","sha1":"dd444da6aab37ddb730e18f8c647c35980dfb444","sha256":"066e3d8a3b22c46bc758cbabd06b6771fbb798c1cda94bf071425407c3a9b2a0","sha512":"17139773fea0f250f6f9109723c721044397ea45f8189cc194c846beff821b4afd39b141f1309bd0ee4d2fd7dc96a816a0db53c9524730427f76d23cdbad5307","ssdeep":"96:DJFs1Bx13gb61j1l0q7gx10UFZV4jl22D+i8kDNLeOl:H61rp+mULV4jM2D+z0sI","tlshash":"d09161a444f1663b18a386a9e9d07f47af817607ce8d29417baf40e31f87d54c86f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"governances-onyx.com/","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T13:49:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":2,"received_data":587844,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-07-23T13:25:17.67264Z","alert_count":0,"request_count":4,"received_data":4654,"sent_data":2224,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-07-24T11:49:57.873316Z","alert_count":4,"request_count":2,"received_data":628529,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"governances-onyx.com","ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-07-26T13:14:02.895897Z","last_seen":"2026-07-26T13:14:02.895897Z","alert_count":12,"request_count":4,"received_data":1709804,"sent_data":1921,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-07-24T11:49:58.010208Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":649,"comment":"","tags":null,"fingerprints":null},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-07-24T11:49:58.881436Z","alert_count":0,"request_count":1,"received_data":674,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-07-24T11:49:58.096449Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":653,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-07-26T02:35:00.635862Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-07-24T11:50:00.709064Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1264,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"governances-onyx.com/","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-07-26T14:37:55.047356Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-26T14:37:55.040736Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/bpY5h09KFT.js","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-26T14:37:55.027647Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4caf32a76b8acc1782161695533a3218","sha1":"734abf7f6ee9f38abbc781dbe129aab86a237227","sha256":"e3c8b4147474421f1b158185d5affdeffdd9d26c48e0cdb4f97602d27025dada","sha512":"94b2538b4c77a65ce184acd5dc7dde675377edd140d5e89628fc113f8687c52bd0d5d52cf90e4c25a08dd0cda83b7afc725b749906a4fc47357996c7d9ea5195","ssdeep":"1536:V5hjW7cPoHBO2fYlBZnuv8RXUz5PD9GUOFmoOIfYVTgAZLHX+231O/nAMgDK1Onn:beDYPuEFUtcvyYSynSq05N","tlshash":"81d445932b91982ec2ee9741cc348c5f9cf495318fbbd049ee279c45f68c6a456e8f09","size":627573,"data":"","first_seen":"2026-07-09T22:10:06.988212Z","last_seen":"2026-07-26T14:37:55.043017Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-26T14:37:55.027042Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"2a4d2e2927eab5dfd9a1752ddf039305","sha1":"49c69403cdad4e6ee711381fc9ce130c1dc7d48d","sha256":"7b49653dc9461d5bfebc2d82ae0b11c653e278a2b39e1d7530a0f4e056a77d54","sha512":"ce9a51ce418d14fc0daf02f09d20ae5753a4fc3aa969a637003a2bb21f0af50c276b2ee6ed08de73e4a00d34e00939a99203ceefb3a0b5ec67eb6a79248a9643","ssdeep":"1536:WrdhJtW7cPoJVoD2zgCK1o2FJUx73DvGTFmoOIU0gj1BVr7sD6pnFXFQi31O/nAz:WXm1cCso2nU5+Ty7MyKRMsm5r","tlshash":"9ac415a66ba59c6ac6ea030a8c385d4f9cf45832877fd04dee6b2d14f5bc19057e0f09","size":588809,"data":"","first_seen":"2026-07-09T22:10:07.114055Z","last_seen":"2026-07-26T14:37:55.048302Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"340d91dcf13b076921b75300ec47f83a","sha1":"c890f2491c91c557a44ba929c67e08b5944d53ba","sha256":"4463ac697265105c186e84801bbd5bad264f59470d34ff3ec348367d6f2e6f67","sha512":"bf78f6567574d468f2e4255befb3eda23d84676cae1c3da368fbd8763c723eac5e8bbb01f772db90a140a95ae88fde992ebf4105575fe08502e64aedc780658a","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGPQXp91gGT8b:QQqJr/0SVwZmzHCP2aIW","tlshash":"ff55b0e70ac1c92da4afd921ce3c0c7c40f656622d79218be553e9dae6cc3754f8ab44","size":1320082,"data":"","first_seen":"2026-06-02T08:49:54.163198Z","last_seen":"2026-07-26T14:37:55.045426Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.1","filename":"https://fonts-css2-sans.b-cdn.net/index-3731bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2206569},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj139 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.41507953362353633] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj140 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.785073760702e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj141 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj203 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj204 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj205 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj206 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj207 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj208 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj209 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj210 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj211 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj212 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj213 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj275 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj276 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj277 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj278 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj279 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj280 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj281 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj282 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj283 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj284 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj285 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj347 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj348 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj349 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj350 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj351 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj352 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj353 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj354 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj355 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj356 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj357 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"error","text":"Error injecting modal UI:error loading dynamically imported module: https://data-image-svg--base64.b-cdn.net/assets/send-bb23cecc.js","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js","line_number":374,"column_number":83261}]},"http":[{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:21.716Z","timestamp":1785073761716,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1607\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://governances-onyx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1607,"data":"e=%5B%7B%22device_id%22%3A%228244aa92-1fd8-4dfe-aacf-1b0dcc2b5a7b%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785073761700%2C%22event_id%22%3A6%2C%22session_id%22%3A1785073761509%2C%22event_type%22%3A%22provider.request.error%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%228d2d3d0b-639e-49bc-8121-69546b3c516d%22%2C%22errorMessage%22%3A%22%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fgovernances-onyx.com%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785073761218%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22803458d9-58e1-4a82-bf8c-5f9f9bdb602f%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22e8c9f0d7-e557-4447-b3ef-b0246e76a44d%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A6%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785073761700\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=61a36c20ab873d2c162247b20d6e4b4e"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 2851182788578688831\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgzrsvHOEfIv8L3FG%2B5uQ1ow2E5llG4MnR75LSmzeIyhWbrHj6F1ooifRATkV9fXGl%2FUvCbd5vYKnCZRqDSwTDrSfkPlPMDGzBXgDOFAH5297bI1iX81tr6P9keSKlezcMotm%2B8UWQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=0540bf3e-af8c-4f18-9a2e-bf5a8b8560dc; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 13:49:21 GMT; HttpOnly; Secure\n__cf_bm=93HZn0UldRf04fn6cTDL4BFU2HuqigVWH71ash1N3Yg-1785073761.7180512-1.0.1.1-XV6qmuof9JRuy.1Ec.RzKf.dmOmC15KicpPk4oFmbtM2B.oKcHginwXhdCt4YoJWuHUzgPBgcJHGXFfGZyulVddNpiZd4PBEz3PRhkWzALtEf3VrXP6MZKT2PK.b67II; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 14:19:21 GMT\r\ncf-ray: a213de02bfaf0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:21.724Z","timestamp":1785073761724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1962\r\nOrigin: https://governances-onyx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1962,"data":"[{\"eventId\":\"1f0b6f09-3ced-415e-b138-e32f2fe17ea8\",\"url\":\"https://governances-onyx.com/\",\"domain\":\"governances-onyx.com\",\"timestamp\":1785073761138,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"networks\":[1,56,100,137,43114,10,42161,42220,25,1088,122,8217,4689,30,40,2222,1030,324,2020,1101,1116,1111,14,7777777,8453,59144,5000,169,534352,204,34443,7000,4200,81457,252,196,13371,200901,223,60808,1729,6001,167000,7560,1329,1625,1135,33139,42793,48900,480,2818,1923,146,177,57073,2741,1868,80094,130,1514,232,239,9745,2345,98865,747474,43111,999,88888,4326,16661,50,4114,4217,124816,143,988,2366,4663,369],\"metadata\":{\"name\":\"\",\"description\":\"\",\"url\":\"\",\"icons\":[\"\"]},\"projectId\":\"2ae562535b08b12ba6692b8e12a6b84c\",\"themeMode\":\"dark\",\"themeVariables\":{\"--w3m-z-index\":999999999},\"features\":{\"email\":false,\"socials\":false,\"onramp\":false,\"analytics\":false},\"defaultNetwork\":{\"id\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"blockTime\":12000,\"rpcUrls\":{\"default\":{\"http\":[\"https://eth.merkle.io\"]}},\"blockExplorers\":{\"default\":{\"name\":\"Etherscan\",\"url\":\"https://etherscan.io\",\"apiUrl\":\"https://api.etherscan.io/api\"}},\"contracts\":{\"ensUniversalResolver\":{\"address\":\"0xeeeeeeee14d718c2b47d9923deab1335e144eeee\",\"blockCreated\":23085558},\"multicall3\":{\"address\":\"0xca11bde05977b3631167028862be2a173976ca11\",\"blockCreated\":14353601}}},\"featuredWalletIds\":[\"c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96\",\"4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0\",\"ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18\",\"fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa\",\"971e689d0a5be527bac79629b4ee9b925e82208e5168b733496a09c0faed0709\",\"c03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a\",\"1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369\"],\"sdkVersion\":\"react-wagmi-1.8.7\",\"siweConfig\":{\"options\":{}},\"caipNetworkId\":\"eip155:1\"}}}]"}},"response":{"raw":"HTTP/3 202 \r\ndate: Sun, 26 Jul 2026 13:49:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a213de02ed832efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2808,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:20.313Z","timestamp":1785073760313,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T13:49:17.993Z","timestamp":1785073757993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governances-onyx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 02:52:39 GMT","end":"Wed, 21 Oct 2026 02:52:38 GMT"},"fingerprint":{"sha1":"CF:BC:CE:E9:1F:9D:4C:21:50:37:9D:77:7C:59:57:56:5D:04:6F:53","sha256":"1A:A4:B1:E2:A1:C3:7A:7E:1A:EE:04:31:04:EF:F3:A2:B3:F3:F3:CE:7E:74:02:C2:57:3D:DA:D7:2A:1C:B8:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: governances-onyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 26 Jul 2026 13:49:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 07 Jun 2026 22:38:38 GMT\r\nETag: \"326b2-653b18e101780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206514,"size_decoded":49965,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17536)","md5":"5622cbd8938a0c83e8d70678af1875e2","sha1":"1c1c072521dcf2899d27ff70ccc512c3077e8673","sha256":"6210378fdc23913662624fce8bd33ae176d30ac47aac70fbf51f4b9390cd5392","sha512":"2c1264ffa95ec0dec376197dea794d2611a4cdd71a95127f9629e1b2a5298ff2a90928ac5b8aff97ef41021a2ef162c2f56eb1d220f9a871dfc4bbcf3ea6c306","ssdeep":"3072:2wjI/n0IPn1Eehd6QS30k528blW88blWP8A8xN89GEbP:3jI/n0IvbDm28Y88YP8AoN89RL","tlshash":"f6140923124b2667190d3efb9aa67d4ed108f593cd138ec4f1ed48d8978fb9a494236c","first_seen":"2026-06-13T17:48:46.502324Z","last_seen":"2026-07-26T13:52:56.509873Z","times_seen":10,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":21,"connect":29,"send":0,"wait":63,"receive":39,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:21.701Z","timestamp":1785073761701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1584\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://governances-onyx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 5671545433526849833\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5z2lYp1JkLf9bfr32zTrKg6tZAIEvbOZ%2BMwKEmRyVXdMhMx5kzTWMTdaqJv7v0QhkA6tAkYB4gaoPCUPpUCRyYkekkXw5QH0udOQk9%2B2iEYft6H04LbkvTp7xsdjD77EejsBDlVcQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=02d59723-2325-46bc-842a-4fd8f262b258; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 13:49:25 GMT; HttpOnly; Secure\n__cf_bm=.nzJAk2jO6ueE7KgokulzU5R6SfgzYWUAtXE7f.NFCs-1785073765.0711658-1.0.1.1-L3FhDrKsYXnE3sK0pMgxS4VCovr9YY52jLteFS2s5sfNkcP.7.yvbUrhv6.hujorrNuS0Skc6DFqM7P2KDoz.3817Ot0_lHlbisIE9UtRhRTg_I4CescVqS3wk7UDF9w; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 14:19:25 GMT\r\ncf-ray: a213de17af580883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/bpY5h09KFT.js","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:18.366Z","timestamp":1785073758366,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governances-onyx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 02:52:39 GMT","end":"Wed, 21 Oct 2026 02:52:38 GMT"},"fingerprint":{"sha1":"CF:BC:CE:E9:1F:9D:4C:21:50:37:9D:77:7C:59:57:56:5D:04:6F:53","sha256":"1A:A4:B1:E2:A1:C3:7A:7E:1A:EE:04:31:04:EF:F3:A2:B3:F3:F3:CE:7E:74:02:C2:57:3D:DA:D7:2A:1C:B8:BE"}}},"request":{"raw":"GET /bpY5h09KFT.js HTTP/1.1\r\nHost: governances-onyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 26 Jul 2026 13:49:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 08 Jul 2026 17:01:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4e825a-c486e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":804974,"size_decoded":209183,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-26T14:37:55.027647Z","times_seen":96,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":38,"send":0,"wait":61,"receive":85,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.036Z","timestamp":1785073759036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://governances-onyx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Zw5VWOd8mLlQT26wdRV+9g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: SwV9fa/bECjshSA95UVcXy6yBcE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":85,"connect":101,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.245Z","timestamp":1785073759245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://governances-onyx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: REUi/DnJhbKtkmaebcEm1Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 13:49:19 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: FNuMK4AXlWPs2mkOciJoXZkfr6g=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":26,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.031Z","timestamp":1785073759031,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://governances-onyx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2fcIAsFPbIp9M3JqjWrXew==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 13:49:19 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: hTSfEAK4lD1d4ecXEzXSa1cdDM8=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWBHE5YBnRF16j; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 26 Jul 2026 14:49:19 GMT\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a213ddf24cd756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":674,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":0,"dns":31,"connect":30,"send":0,"wait":770,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.624Z","timestamp":1785073759624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-5q3nqqoukwf.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:19 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501294-99375\"\r\nlast-modified: Thu, 09 Jul 2026 21:28:52 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c41f20485740b3f661580446e8f7d47a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":627573,"size_decoded":109289,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4caf32a76b8acc1782161695533a3218","sha1":"734abf7f6ee9f38abbc781dbe129aab86a237227","sha256":"e3c8b4147474421f1b158185d5affdeffdd9d26c48e0cdb4f97602d27025dada","sha512":"94b2538b4c77a65ce184acd5dc7dde675377edd140d5e89628fc113f8687c52bd0d5d52cf90e4c25a08dd0cda83b7afc725b749906a4fc47357996c7d9ea5195","ssdeep":"1536:V5hjW7cPoHBO2fYlBZnuv8RXUz5PD9GUOFmoOIfYVTgAZLHX+231O/nAMgDK1Onn:beDYPuEFUtcvyYSynSq05N","tlshash":"81d445932b91982ec2ee9741cc348c5f9cf495318fbbd049ee279c45f68c6a456e8f09","first_seen":"2026-07-09T22:10:06.988212Z","last_seen":"2026-07-26T14:37:55.043017Z","times_seen":43,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":7,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/style.css","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:18.365Z","timestamp":1785073758365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governances-onyx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 02:52:39 GMT","end":"Wed, 21 Oct 2026 02:52:38 GMT"},"fingerprint":{"sha1":"CF:BC:CE:E9:1F:9D:4C:21:50:37:9D:77:7C:59:57:56:5D:04:6F:53","sha256":"1A:A4:B1:E2:A1:C3:7A:7E:1A:EE:04:31:04:EF:F3:A2:B3:F3:F3:CE:7E:74:02:C2:57:3D:DA:D7:2A:1C:B8:BE"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: governances-onyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 26 Jul 2026 13:49:18 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 30 Sep 2025 15:52:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dbfcda-a92cb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692939,"size_decoded":279151,"mime_type":"text/css","magic":"ASCII text, with very long lines (32317), with CRLF line terminators","md5":"80b00c4747d78a1100b0cdfd27b789c8","sha1":"7e833bba686d8b251938d62a948f9425543e3ca0","sha256":"b61141def3627bab8ef671c14ab119b46a2a8499c2e8f49a4bcf5d3ffff65c0b","sha512":"3b88bf8ede69431d67f33706fee674c16da233105810fa7474aec99e56c17c58e62f38f13b507222400573f9805155f33bebe710c9932db8760f8baefe538d4a","ssdeep":"12288:ChFVDEZMyS4LJY97zU0IueixHEe/CJpmNFMvobh:sFEComPmiCvJpmDMy","tlshash":"0be48cf6a043ed526d760a41945f3a04ee3828ebc925a154bc8d24446ff4cf4be2ef78","first_seen":"2025-10-13T04:20:29.171026Z","last_seen":"2026-07-26T13:52:56.51335Z","times_seen":14,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:18.882Z","timestamp":1785073758882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4519668\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMR%2F%2Fkd8OH2pTmowA1z5QehkG2F67yYN2rZaehoYgYdSm8YtIz0A0jnlef2LlcwLiNrRMp12muobGMQy3brgbBpOFho5LBchPMDurUZerw8iXTqHAL0bViDBQ8kHBPDYARU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a213ddf13b37b521-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522095,"size_decoded":159691,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-26T14:37:55.040736Z","times_seen":430,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":5,"connect":4,"send":0,"wait":10,"receive":10,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:21.715Z","timestamp":1785073761715,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 4494\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://governances-onyx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4494,"data":"e=%5B%7B%22device_id%22%3A%228244aa92-1fd8-4dfe-aacf-1b0dcc2b5a7b%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785073761529%2C%22event_id%22%3A3%2C%22session_id%22%3A1785073761509%2C%22event_type%22%3A%22perf_first_contentful_paint%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A735%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785073761218%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22803458d9-58e1-4a82-bf8c-5f9f9bdb602f%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%2257584803-310c-4c5d-a14b-c2a3e7d48c6b%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A3%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%228244aa92-1fd8-4dfe-aacf-1b0dcc2b5a7b%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785073761529%2C%22event_id%22%3A4%2C%22session_id%22%3A1785073761509%2C%22event_type%22%3A%22perf_storage_estimate%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0.4532%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785073761218%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22803458d9-58e1-4a82-bf8c-5f9f9bdb602f%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22a517f7fd-a35a-4702-a81b-66c4f8bc43bb%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A4%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%228244aa92-1fd8-4dfe-aacf-1b0dcc2b5a7b%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785073761698%2C%22event_id%22%3A5%2C%22session_id%22%3A1785073761509%2C%22event_type%22%3A%22provider.request.started%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%228d2d3d0b-639e-49bc-8121-69546b3c516d%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fgovernances-onyx.com%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785073761218%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22803458d9-58e1-4a82-bf8c-5f9f9bdb602f%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22b5057563-e5f9-4202-a739-41181f45e5cc%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A5%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785073761698\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=ed9a907e752c55a85dbe56bfad8a2984"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 5667393275787142193\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adH0Z8%2BQEHdBRdK6jsj3dYJKSsUOpsqQPBuXXaBxUQxjKh16zWXUyz8Uslvf5%2Bk0lHO0cgTDq%2FhFAtBFr6yGkuvtgH8fpMMi4JktqU%2FY9xkWwM6tlToCol1ORIYcWQlWWppzSZpWuA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=67b040a3-5e17-41d1-855b-d74e03848236; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 13:49:21 GMT; HttpOnly; Secure\n__cf_bm=LgzPPvUzoGfM8JoT9EdpNh70yroge9A581sMH.WEXQQ-1785073761.7166543-1.0.1.1-yr7IcOr7FfUxcvak0BYI04GwWxalBftypR6NaPdhu4x7sla4VfFA2wSinv6SvWLZMsCPPRtgKlWbuvP57sPyziKKRDMc6_hjmtsaBqh07YU7KnST6NcmYggJPaWSLNcs; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 14:19:21 GMT\r\ncf-ray: a213de02bfa20883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:21.700Z","timestamp":1785073761700,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1556\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://governances-onyx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1556,"data":"e=%5B%7B%22device_id%22%3A%228244aa92-1fd8-4dfe-aacf-1b0dcc2b5a7b%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785073761509%2C%22event_id%22%3A1%2C%22session_id%22%3A1785073761509%2C%22event_type%22%3A%22provider.request.started%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3Anull%2C%22os_version%22%3Anull%2C%22device_model%22%3Anull%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%22184bebb7-1b47-4864-92a7-a660f29ced45%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fgovernances-onyx.com%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785073761218%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22803458d9-58e1-4a82-bf8c-5f9f9bdb602f%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22a16d884d-f74a-4649-bd6e-4281b01f3406%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A1%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785073761510\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=bb31f737e1e89706dcb3d159a4af66b1"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:49:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 7919808422845567525\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwItB6gHm6LcUScd%2Bz1njNGtGwhnOE9r1o2L9jln04p5cD4CjC4zDajNkmG0hk1tS5TSInio1VioUoZW6dqKpVb7G3WP8%2B%2BBXkc21IgROacTADu2%2BQFSpO2wd6JP8%2BPyB638x%2BJAcg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=844c148e-cbb1-452a-aa20-a9c896ef1c09; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 13:49:21 GMT; HttpOnly; Secure\n__cf_bm=cnsW3GfX.KW7e3vBPJ5c9zmVfT2Rt6aao7oTw9ZHryE-1785073761.7160225-1.0.1.1-GJpuI0RQXYDrLVaeLjO.E9ZvtBuwiXtbsVKmN_qw6SuDgYr5VxnwgdNkNG6Mzj6uqCbnY7e07MZCYzua2hY7EQZhu_nNWF89xxpW_rSye4YM4CCfj9cXwbz1azgzNAcx; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 14:19:21 GMT\r\ncf-ray: a213de02bf9a0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.045Z","timestamp":1785073759045,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://governances-onyx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: azBO0YAzcqWlAG9fk0yyGw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: xA5+oG8CCzurszzibHZRQR2Vd0Y=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":0,"dns":283,"connect":367,"send":0,"wait":90,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"governances-onyx.com/favicon.ico","fqdn":"governances-onyx.com","domain":"governances-onyx.com","tld":"com"},"ip":{"addr":"62.60.226.88","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:18.942Z","timestamp":1785073758942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"governances-onyx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 02:52:39 GMT","end":"Wed, 21 Oct 2026 02:52:38 GMT"},"fingerprint":{"sha1":"CF:BC:CE:E9:1F:9D:4C:21:50:37:9D:77:7C:59:57:56:5D:04:6F:53","sha256":"1A:A4:B1:E2:A1:C3:7A:7E:1A:EE:04:31:04:EF:F3:A2:B3:F3:F3:CE:7E:74:02:C2:57:3D:DA:D7:2A:1C:B8:BE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: governances-onyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 26 Jul 2026 13:49:18 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Tue, 30 Sep 2025 15:52:26 GMT\r\nConnection: keep-alive\r\nETag: \"68dbfcba-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4529,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6f6e918a63567dcc044fcc66038b0b6d","sha1":"d724830605d4a21e9fee60daf422750ebbf6cde5","sha256":"b3507c423f55ea875500f80cfe91e0aafb1583f6de816f4865eb9c755eb90c82","sha512":"067b51f2f98564e8f13a9bb5198781ada497a17274dffff38f3f0f51dceb07cb4140a5076b6ba58768120dbbe3bb8a6442a263be2486252d51c3623d3190da58","ssdeep":"48:rE3SXvzEFXJIVpMqOFoToxJup/gtxUMdDmee:4erE16VyqOFoToxW/gTUMdDU","tlshash":"2391ac5aaa26d950ea44c170934fee3a4c23ceb89a25b00961f27e3739b72e3244554c","first_seen":"2025-10-13T04:20:29.208341Z","last_seen":"2026-07-26T13:49:54.393644Z","times_seen":28,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"governances-onyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.93","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.039Z","timestamp":1785073759039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://governances-onyx.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: abVhVBetP27+2h1mQ+8hjw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 13:49:19 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2rmNJ70jvJloSsM/5uC6GWNzgdc=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":101,"connect":122,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://governances-onyx.com/","date":"2026-07-26T13:49:19.764Z","timestamp":1785073759764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://governances-onyx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 26 Jul 2026 13:49:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 6322222\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNzDfV6AmKRYO12hAwNmdh86Gwh1Os3kmU1tK9vX%2F1JMby6jTWDmt1f%2F%2BBYwr01Ylkn3u1Add0YMyJf144MkmfHHsjUMFURdeMiu9Snl6tLBlkbgeycZPvnf3%2BWfrXdUX0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a213ddf689b42efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":24474,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-26T14:37:55.027042Z","times_seen":448,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}