{"report_id":"1b6a6717-f51c-4eb3-9b5e-33d18263b08c","version":6,"status":"done","tags":[],"date":"2026-05-16T22:06:16Z","url":{"schema":"http","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"title":"Ondo Global Markets","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T10:49:09.033131Z","times_seen":17797862,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T22:06:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ondo.foundation","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-12-04","domain_rank":0,"first_seen":"2024-01-09T09:43:04Z","last_seen":"2024-01-20T09:21:38Z","alert_count":0,"request_count":2,"received_data":65151,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"ondotokenization.com","ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":4655586,"sent_data":6030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"84f979cc794b8746e7e67b9fd00ab97a","sha1":"8f617b1702104dc2640bb39de9cf19f6e36dbe72","sha256":"b947a6b467f15c13c8fb34f85f8f811b1dd2d09a68117a68b5f0933176a3f329","sha512":"5d2a220e6bc983d4a9ae17a24efb17b4961856df290f7117a8cd1b18ed58621cdd27914454e77e61a5f23fb91b18e27634fa643db8f846f46e05469dda772736","ssdeep":"384:UcBhtBj5qzNEhkAG5cZWzVXR3g1bokZs3LTdUoMkP676nelBKXXItKzNfCmdn:j7qzuA5cZYPabbENMkVFV4Yn","tlshash":"ea1398a9295690d41f8912efc0f7a441a1149e77cdacb1aad52fdcc13229f3281db27f","size":41844,"data":"","first_seen":"2026-05-16T22:06:28.247901Z","last_seen":"2026-05-16T22:06:28.247901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-07T23:31:54.168819Z","times_seen":3446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90e2dc778a7f2a8571afb7da8ed2dc23","sha1":"94ac551cfba90aa71f6487022d847bc135fb81a1","sha256":"ade7cbbd411a4252a80db97134b12f55cef62cc8cf70e6d57402b0d789363bac","sha512":"84c0c2b85c0e8caa4eff484d08b50a1af09ffaac841a1307b3fc00452c525a9fe3226ef359b1b953709fac469a7d5023c3f6f87eae37b329eeef981ff548d19b","ssdeep":"","tlshash":"36d0226fe843c0a4382f301a9eab640400b6e0bf2e50c9613cde8a030f27c89c036cd4","size":224,"data":"","first_seen":"2026-05-16T22:06:28.249369Z","last_seen":"2026-05-18T11:55:27.721639Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/973bf863-d91e-4724-8c94-fff6a91e4aa3","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d8a870b3fad6879ced24d3d34507a7b","sha1":"107c5ba19cb3fb445f9722c7f7d05734cd988d78","sha256":"2a13587afd5fcaedf353498e93fe40bd29a84c2b8b7bbbf703ad39bf37fd234e","sha512":"3403840a5556e7bf787ab34f02e7ca6caf3682ece46013396507e5efee74ef64d3656ec97e80b21d6635c9999df55d044a70361ebd019879f54faec06993fb27","ssdeep":"49152:ZWdMhfxNeeHFVZiz0mIwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtohV:Z","tlshash":"23f523816c07a6e28f40135570b79e0b55a81d1248adb1dbf79cfdc2386efa1c1eb92d","size":3330644,"data":"","first_seen":"2026-05-16T18:14:04.630541Z","last_seen":"2026-05-16T22:06:28.251Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85dbced209c078fd107bfb70771ca014","sha1":"836858c703ef259da627806a89ea152e28ba8265","sha256":"fa7574a62891ad913f10c1c852c528d30dcaedc1966645bcc980d16ce57561ab","sha512":"7a4b16f1876c52226fb6301aa01e377b70317e5ed952b9bd7428068c1afb5f2bc608a29546e4964e4b01115ab81bc163b9366a650bf87dcf05cf680a7333043a","ssdeep":"","tlshash":"d8e05ee73de660250adb606b2aab16887122901f3c84d9103c4c44105fa2f9a56657e0","size":317,"data":"","first_seen":"2026-05-16T22:06:28.251556Z","last_seen":"2026-05-18T11:55:27.723219Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/kv6o8zdp.php","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a469b1332d8ce5fc9822337810d6402","sha1":"7d8630913b2c229ba6d9fcdf94e012c4948098c4","sha256":"3037229ef1f38e2e3f6a0f3759473675c06bbaa2e831c07031e59a60c14aa3d0","sha512":"ef0574b473bcc58652f845c61b944b5828826c415b58404de604b975723e3abbc615da57bcef64005d51d5dbb1168e978d80da419aa203632953f97ccccfaeb5","ssdeep":"1536:/UPsGeHUDZGpWdGFZs+ilxW6owGpDlHQv8T0qUV+nHkY/IfnKCj/:/UPsGDtG6Gs+ilACgDlwv8T09+EY/Ol/","tlshash":"2f54a665e743408cca5e118fc1a3f689c8144c668f5cbc93ef1fce826a59b7590d72ae","size":297823,"data":"","first_seen":"2026-05-16T22:06:28.252438Z","last_seen":"2026-05-16T22:06:28.252438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-07T23:35:22.194346Z","times_seen":3339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70e95e54467209938bfb579447f96297","sha1":"f4706faeb6fb682a5db136fb83025259effd7706","sha256":"795c6a39bbe4272a3a619fa5bde1866258d32634d2ef4a396329f03174adaff8","sha512":"4c8aa2fe485b676a13b9d68a83ce9fe7a8442edf8ae871022949d835fe8b2a1048aa0a1b7ddf1eea491a2d2085923cb25c0da8264ffbd8ad8b322a02bded1f19","ssdeep":"","tlshash":"a5519e4eeeb31a196193602e575fa088e9c1c2131e17ed1ff81df31c4f5c05296aada5","size":2917,"data":"","first_seen":"2026-05-16T22:06:28.253798Z","last_seen":"2026-05-18T11:55:27.723933Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-09T10:04:44.156306Z","times_seen":3402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-09T10:04:44.151665Z","times_seen":3233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a726e0c2359b18a3cef95bd7b80059d","sha1":"73683685ecae98c2134bc2adc42a106e2a4ae99d","sha256":"221f08f3f8241468df0233cd1104a9de0ea6224ed2680e68a40996939242b2ba","sha512":"705c8ef09b43a69786554d8430c570d9aea1ff61b2d9671b2e4013c2bc3340bfb1e37fc63aff8a60ff701f9462d4d15fb8b191d39f6275ecbebe3d8030dbc9aa","ssdeep":"","tlshash":"3cf0e56d74f32571127bb13d032baa54323390a71254da51394c0996cff586a1a9aeca","size":565,"data":"","first_seen":"2026-05-16T22:06:28.255765Z","last_seen":"2026-05-18T11:55:27.725117Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e340f215eedd7db1705c225f6694d300","sha1":"265e56e574ee366a2a7db9246b85206fb39b0dbd","sha256":"4c8bfbd9c79a869f74ba5172609104fbda9cee9c57741e7ad2c838496298c995","sha512":"161343c22e1c22028b94188c9690a7be2d4e9ebaf231fcfea4d4206a991e1cca4f04e8b4cfdd88349c78167a9fec382d95ba9d6c0826930454102463cac2d07c","ssdeep":"","tlshash":"45d0a72e1e6390244097219b6bbfd71971aa901b5014c5187cdc985cbf55d8bc405af0","size":281,"data":"","first_seen":"2026-05-16T22:06:28.256613Z","last_seen":"2026-05-18T11:55:27.725806Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"15697a918a70d7cb187fa4d5609f254d","sha1":"9abfba8a4bbfc6d1249b171b2e866be7e678b64a","sha256":"c2251455260731549126a4a858e31c24c88bced569b9b00a676763f8d089aa54","sha512":"817afd28196622abf17886d3a795e125d0db68e46be2e7b1c74aa3dce3e26f1e0983e7bf91a2dabf3a109acc6c17e8e8b9840ca3f24a50210d8a3d295fac4cb6","ssdeep":"49152:yWdMhfxNeeHFVZiz0m8wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtubL:4","tlshash":"32f523816c1766f28f44135970a79e0b41a81d1258ada1cbf79cfdc2386efa1c1eb93d","size":3328220,"data":"","first_seen":"2026-05-16T18:14:44.971918Z","last_seen":"2026-05-16T22:06:28.258059Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ede7c434650431c113c820c17a5f0e7f","sha1":"753d5fb178dca38b539d7210f2f221f0682982fc","sha256":"6c238b6092e41586ce762c29d37ef057c498d461726d1b291d488bd69312f341","sha512":"5f358d9b176f75fd3e777b4b1ee03ccb394f1c6be0fec6b43a22eccf69622e66bb2b796d18e634219f0bea9a82c80440f956d200bad783a7cb50648b117bddd6","ssdeep":"","tlshash":"212102adb1e339739233b139477fa694393240672159ee913d1d14911fd059822faf8a","size":1230,"data":"","first_seen":"2026-05-16T22:06:28.259071Z","last_seen":"2026-05-18T11:55:27.72961Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-09T10:04:44.150728Z","times_seen":3271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1047740f9365be6fe8ad96c88b227304","sha1":"01eb6b220a8b884a093b429a00017bac9f51e80a","sha256":"04a80c010083ad271f7bc701e596c643ede60fb3876b8079184aace629ca1318","sha512":"8bda631de8e1c51837305bd1f6d3c914baff404d27aee241365c9b89c02ca2ace6c0697983aae630bd72138a031598f443f2e8826e6a61cc7d9844189ee7b21c","ssdeep":"384:16ChslKAkykgxKMl+BcPbw2k5kqV0BQGiNQhZNwN8VxyNz7X/IZ7WvWTpou:wChs1kykyKpa+BY28V+UKWWu","tlshash":"35b2c78e78c5f13593227079102b30cea56faef5685d5247d2e0e4e1f4f2309caabd69","size":24426,"data":"","first_seen":"2026-05-16T21:32:47.864279Z","last_seen":"2026-05-16T22:09:41.683946Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a321b1b4b529558ead3d5f6258d34856","sha1":"88f6b5bbe761155c3f41da41703ccd7446d95cde","sha256":"38ad1bc889758f0a18ecc45bcde1669491564b5383bfb8769ff00d381597c1aa","sha512":"cf8271536c84ed7d7cb84a8259822a9c0c016de0a5725aedeb7b1c51c3615613d21b2e04d2e0d1188c65e2b23de35e63ca8fc84d6ebae869e5dec0a0afa52be6","ssdeep":"","tlshash":"b111c0753a2a5534cad5818b317ee7a93d3260717a02a184c3accc295d28e9714efdbe","size":902,"data":"","first_seen":"2026-05-16T22:06:28.260456Z","last_seen":"2026-05-16T22:06:28.260456Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4660a4489765d245b8ae99fd62feab","sha1":"e8402a4b93cb7b0460ff77994949cdc15d5cfa68","sha256":"4cfa90eb215562e271c769ea2a08d82673a4877ca899bb5543bda27da2133fff","sha512":"ecaf6e777265054a47311b847a5dbb363e23c3acf8eaaa1e54874e83081c881354b7bfc2bea48b06a04bc1b7f19e017cfe2cb674db9142f7e44dc8f374c7d981","ssdeep":"","tlshash":"6dd0235528f5cc3055d801461079d7ec756175a07712b24481dccc6f6e33dd358b165c","size":217,"data":"","first_seen":"2026-05-16T22:06:28.261862Z","last_seen":"2026-05-16T22:06:28.261862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-09T10:04:44.161747Z","times_seen":3487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ondotokenization.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:52.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/883a1f27d85f/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 16 May 2026 22:05:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9fcdafb00ada712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24426,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T10:49:09.033131Z","times_seen":17797862,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T22:05:51.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NttkZGuUyuN3KhczEcDxSl46shFqN%2FGhwL9MKYi3QrvgV%2FNUlK8iW2P%2FB0rW2UpamBBkc9BUKStnb%2FgysYdwX8dnN89YkSOmDXctkRBJAo9OiIcQYK17rwgaZmvWBBiC2mSOmwAJQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fcdafab7df8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44316,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6761), with CRLF line terminators","md5":"c928afd11ef42e09fec5e5830d8cbfff","sha1":"dd5d2d36c88c64d837525c266f164d7323a7c85e","sha256":"bdc098ba1df4f3b4df5ab40727dd8b9df0b9384c6844bc450e1b953a2d7d0d2a","sha512":"85bf6f9b91049d6f06c715bc575132351bc619e523c8b2f9c7165e80ef915e7e0cd0f539c4a420b6de8f6a09803564cbd89bf9f97d8054a2bf55c8a8797d5d0c","ssdeep":"768:RCA2NRmcLzDj7fw4/GwWmcLzDj7fw1C/x/q:Rmtz7GwWtzpx/q","tlshash":"4213d656ebe01154b0339778e773865dfb5240239601d268bbec2646cfb648c8a63fde","first_seen":"2026-05-16T22:06:28.235023Z","last_seen":"2026-05-16T22:06:28.235023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":59,"dns":42,"connect":1,"send":0,"wait":69,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/bank-of-america.svg","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /bank-of-america.svg HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtfvGr4daKzCj60j5SVaxmUhDEuoY4wmH8eTV%2FK%2BlrTO7eC8LDDHV2FBRN3BS6Ht6o%2B1uIr2L7l%2FEHFUodBP%2FvallAZYkEWo%2FkbSQLcmByWYhGS6HE%2FSDDh9AGudP9%2FC5sBPkMRyqQ%3D%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a04ebf7-123f\"\r\ncf-ray: 9fcdafad6ab1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4671,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58746d191b40fa5910a82480c1e1bc03","sha1":"8dda5daa477729e5bf1790fa5a86967cbd0a3ac5","sha256":"1d48e61b198006c257d7a2aa1fe3bf53fe082e49edde3a6f6cb0333d57671e8b","sha512":"103b7d6e6ff52d942f50869868c99a58d02483daae59878cb8e0658c94b767e19255acfe574025a7c94bff8b73f136e1445ff2680cf07b49d8abdc0a06916e61","ssdeep":"96:dwBF+fQe9717DvVpYzHWTB+46I2gzK3l20QJyn4:Gn+Ie9FzVpkWTB36Zgml2FJN","tlshash":"17a16498837a8efef94e7bfa1b6240283900a4f79523c118e75c1c26bb9541d8c719cf","first_seen":"2025-05-28T09:18:11.248439Z","last_seen":"2026-05-18T11:55:27.715494Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/federal-reserve.svg","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /federal-reserve.svg HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNeqkRjVugMdjVdwfQRuBAXlNyfFkSbuXXcGqri7FA1NyOqDc6sxI5xdbq31YrKG%2B5rZ6ESw4fW%2BjvgoRGMu7Phn%2BOkJ7W5NTcI12Vw5sym16oX%2Finl04ykoHF5OqffC1htimfeFhg%3D%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a04ebf7-12f13\"\r\ncf-ray: 9fcdafad6ab0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77587,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05f97e45e72ae93730a3d2e634af55fc","sha1":"400011d61e5ad6abb7acca9b872b4326eca29aab","sha256":"b81c5f9b46c7e39e3e949025b8a727a2aa83d466379b5294e1ab429bfef40d1b","sha512":"f180c0504cc95b4dad866427266ec49a2bd8f2031c341d146cb08a6748131ff180dedecdb45ded780500267fa5e62e9400db4eff0657d7130538db8a693c6dc8","ssdeep":"1536:rHZVwMb8+6Oh3SRoQru3G8nVmLn+RjPxT/:j","tlshash":"6573b7a5b390b3f5b005e7bcb202a43478763cfa797bd28586e70996659240c4e7dce3","first_seen":"2025-05-28T09:18:11.277153Z","last_seen":"2026-05-18T11:55:27.712781Z","times_seen":6,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/governance.svg","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /governance.svg HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLD5m2HlnFDmKe4Rt8ClE%2FajzdMXC8WYsfFyWpdKSA0O1PPmtjjWo637ESIRyQVrBuHABt84dKdM1F1WdYM4ORXJhHkAJsmFNEl1u6be09ihQYHV7OAC7YBmrFZZ7LFqQNuKVCuoMw%3D%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a04ebf7-a2b35\"\r\ncf-ray: 9fcdafad6ab3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3563bb4db54d0347981bd542badc6728","sha1":"cc8315dc4a40835cf65e28275cbe2134f4ec24ae","sha256":"307c396f1581afbb4b6d98ef43310d256fdbbd751d553d41e5bf81a1756fd3a5","sha512":"05b58f06c1af9dd26fb82f22980b6bd194af1f2b36293504aa7b62377e4cc2b2acf4ed2f547393ab97d34d59e3e8bb4f3eaa28722d93442978759b3e80af00e9","ssdeep":"12288:4fbbQtGjp3OrdLQ/6zsLkpB86ujPkKE+eZXoKTR0YZz4n/zRyJVJXq7:+bgCSzsJZjPsjXXTTzk1y5u","tlshash":"0ce42a75554ebbed7a32ac9dca062c2b5c8514dea204c5cfa84ea3f8d3bb4648d1dc70","first_seen":"2026-05-16T22:06:28.23872Z","last_seen":"2026-05-18T11:55:27.720265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/flux_finance.png","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /flux_finance.png HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6a04ebf7-198cd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMIiyXrf%2BQ8z14z8%2FbuKryjUItyQTCfDT1PdKz%2FBkShKAeBcQIWBJKihBF521n7XAAhMinS87y5YSbe2EcfnNVuo41ObVa3t11Wyhz6fI%2Fo0tmcpXZ4W%2BAs1AoUX4yF04IBSdgzA7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcdafad7ab5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 680 x 350, 8-bit/color RGBA, non-interlaced","md5":"76ba9688d0e97e5ca03ae79cbfbbcc44","sha1":"71599030f1d91d0c8191081a13353d81ce80a162","sha256":"4443c44052d5aa8f6ce33da1fe0f5d770b20d30764bd260291fd4ca8c231f69e","sha512":"5f0c400ceef7ff2759c4287ab5586b80a3b85626fa1a8a4352ad0bc2c6885504b45e32aeea3fb63ca46bbe3fc2444556b5e454c989fc5a22a806054d2982bf02","ssdeep":"1536:+cXOGl9Ma4cvivqG9HMiDULEKJAzmC4OHZiR6UHPiTBuAPm5KS5YePokKNS:1Xrp4cQj4L96sRtPidJPmpOS","tlshash":"7da312019c18cbb3dd5f4ba29d9d8480e3cada8186ea3770f6d3d26e8c0a5c3668435d","first_seen":"2025-05-28T09:18:11.284003Z","last_seen":"2026-05-18T11:55:27.716768Z","times_seen":6,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondo.foundation/fonts/AllianceNo1Regular/font.woff2","fqdn":"ondo.foundation","domain":"ondo.foundation","tld":"foundation"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 06:12:06 GMT","end":"Fri, 24 Jul 2026 06:12:05 GMT"},"fingerprint":{"sha1":"49:0D:C2:39:4B:82:89:10:FD:99:59:4B:84:7E:57:C0:6A:A0:B6:78","sha256":"A7:ED:9E:16:C1:33:7B:6F:80:35:1F:AF:4A:87:EB:58:BF:14:25:5F:F7:7B:AB:E2:10:A2:1B:F2:3E:C7:C3:EE"}}},"request":{"raw":"GET /fonts/AllianceNo1Regular/font.woff2 HTTP/1.1\r\nHost: ondo.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ondotokenization.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1561750\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\netag: \"0de92828400f8bb3a78a9749ddf6c34d\"\r\nlast-modified: Tue, 28 Apr 2026 20:16:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /fonts/AllianceNo1Regular/font.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::llkzb-1778969151719-7f10a588f8b9\r\ncontent-length: 31252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31252,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 31252, version 0.0","md5":"0de92828400f8bb3a78a9749ddf6c34d","sha1":"126cbb40964f763bb43a818496ad95a5720732bf","sha256":"48e5d6fb00cc99ee217d445b55dbab18ef14cbbc3a7bc7c8f65c88f0472563c4","sha512":"9008d6766b23a6497357dc91328fa0106869c50a5e199ca0617d250d3eefa8d68b40d7d275909de8bd1ed03c408903f8b4f72acf4492b8600dc85c58cd51937b","ssdeep":"768:zvScMyEN/PYEFX+kCBQy4+320Cms7/U3qRz9nO8TZ8D:bS5C4+k8Qb+G0Cms7/ZRZnOdD","tlshash":"53e2f1768c88e7f0ea3c5a5a4dc39d04a4d542c57f3b6f892807179fc8da7877188b52","first_seen":"2025-02-11T04:58:36.431905Z","last_seen":"2026-06-28T16:01:02.526228Z","times_seen":36,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":109,"dns":65,"connect":1,"send":0,"wait":26,"receive":2,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/kv6o8zdp.php","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /kv6o8zdp.php HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hs37rWTslJ1e0Hyd31aP2Cy%2BLLHHnGPPu0VbFBe6qwGuNcFOh%2Fe5R%2FkrkVgRrXpLMx7HaBHmV1SJaLoZQtmY4aCG2ZYAV%2FxmcENbvgWouzFWSlTd%2Fq6U2CeLyv0FB6CHfx%2FLTIoIOA%3D%3D\"}]}\r\ncf-ray: 9fcdafaefaca712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299343,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40985), with no line terminators","md5":"5ba6588220f1bd2df03142d7a03b0136","sha1":"530c5a2b23681c1ba82cccaf67537a0e23757c5d","sha256":"0c34d28d608a047339c69701a183c220272adcf24a5d714252cc0691bf18d15b","sha512":"b098783375dfa271775c7d97fe53e2359a2baec36760793192f63a7ecab7fbbf67afa377ba970b9b46b73db288abb2f0cbdea6121c80da547e4f69f63ed71724","ssdeep":"1536:/UPsGeHcoNaWdGFZs+ilxW6owGpDlHQv8T0qUV+nHkY/IfnKCj/:/UPsG9oNbGs+ilACgDlwv8T09+EY/Ol/","tlshash":"3c649355d737738cca59318f81a2f545cbc44c26ca1ca893ee1ece836a19e6d50c72be","first_seen":"2026-05-16T22:06:28.241673Z","last_seen":"2026-05-16T22:06:28.241673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/favicon.ico","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:52.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:52 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQVQOt8gMDQECcfwFNebylo9HFI6mqaRhUW8I%2FXCzKvikrXkNgI1ibS5wqOT3oDuwyx0rNk%2BARQsas9h8gPkZN596NmNQfn1k5dUb%2B5KJR%2F%2F1OJk%2FMmXdWcrCB0M8ID0MpgyZ2R%2FXQ%3D%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a04ebf7-10be\"\r\ncf-ray: 9fcdafb00ad9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c665abf00427133e89dc2c100f853a32","sha1":"886403c1ce60ebffff60780e7fcc15019f7f301a","sha256":"07465c625ddb972cc95c7211007784672c062a53d438b00b29e55193dd3263d5","sha512":"9cc6292f2d9bb3d96acb66387953b2458e700dc9f271943c45bd9f77be33c5a89848994c920b6f4404d4f24f710db141694482b55d5c843545485989ecd32765","ssdeep":"48:/Wpb3Yv8jyLw3WzGwH793rXDnGuKhWIutiwkHb:QIv5LAWiwHVbGwIyK7","tlshash":"ea915201d77d5926f16802748eb3f33017a18ded64e186022bd16f633d9df851aa79bc","first_seen":"2025-05-28T09:18:11.29665Z","last_seen":"2026-06-28T16:01:02.527332Z","times_seen":28,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/883a1f27d85f/main.js?","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:52.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/883a1f27d85f/main.js? HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 16 May 2026 22:05:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9fcdafb1daf3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24426,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24426), with no line terminators","md5":"1047740f9365be6fe8ad96c88b227304","sha1":"01eb6b220a8b884a093b429a00017bac9f51e80a","sha256":"04a80c010083ad271f7bc701e596c643ede60fb3876b8079184aace629ca1318","sha512":"8bda631de8e1c51837305bd1f6d3c914baff404d27aee241365c9b89c02ca2ace6c0697983aae630bd72138a031598f443f2e8826e6a61cc7d9844189ee7b21c","ssdeep":"384:16ChslKAkykgxKMl+BcPbw2k5kqV0BQGiNQhZNwN8VxyNz7X/IZ7WvWTpou:wChs1kykyKpa+BY28V+UKWWu","tlshash":"35b2c78e78c5f13593227079102b30cea56faef5685d5247d2e0e4e1f4f2309caabd69","first_seen":"2026-05-16T21:32:47.864279Z","last_seen":"2026-05-16T22:09:41.683946Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/883a1f27d85f/0.9676960444195668:1778966693:q9RRp1-WSNcEYI8nYcE5hXZR2CugQMvMoM8-1NKawuk/9fcdafab7df8a0f0","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:52.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/883a1f27d85f/0.9676960444195668:1778966693:q9RRp1-WSNcEYI8nYcE5hXZR2CugQMvMoM8-1NKawuk/9fcdafab7df8a0f0 HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12149\r\nOrigin: https://ondotokenization.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12149,"data":"3ZSO$lNe+trhhKZ+eKbcG+hGKGSKbKDOM8BO+IKLO2q+sqdD7-KiO3ql8dKwKXXKI-duK-o+1sKtq+zqnD4SN22DpSKpjjKKtRK3H8L4Kw-O+TMrbV3LLKwfP9chmCUMKMWcAI+MxtSXMW2roKrp38BkDOOTXY5gM5MruKfSN3t$SSXclZGBydGBtKI9DY22u+8OK9jlZ45S3Bnnjr33oKvFfK$oNcybhK-vV1LEKwaHAlBCSjkhpJB$oKvpSKrmIdz7v9b7qKwgV9AEfcKOKDjOhoqLKKx9mfxLN9RBKnTOXLR8Z9GpoKcpSqNZ9rtWXbcmZ7DRKDMujSbOqoKNzvgtNcOAIDCI$CMKwRWKTke9MK+$BGIQMXLcMK9LmYScEFlJvAXvAR9mNccnxAyS8swzytWGccUkoK+-T1+KSj9yEJVfKSLEoWcE2csrN93EPtcpc-VS8g$YOEDn9mKTMmyKKtmynV+ZjMZXdAGKDaUycchsXN2AOh3aciIW7XwEi$m7s-H2-aSKqXD+fRfg-49CQlKt2VSAFROypxTfyVeRgfvHxL1R3auVaFYytQNQCeJUpf5Gv-C+7VY0jCR$qnxHBz29DDHHN8Wo4HSZ4fZI+x4ui$sPCd2V1DLaERDDmLNpULIIeTHiNUcKPDHoY2jlXp1xgmafKP4AIrYwZnPELVmoJQEjxb+mj9$jKAJlKGN9ONRATXINfrfsoT1ljNjj1dIqb0YDQB7wYfmdCny$jevjAlNLHPT7y$iTInLSsAoZ0ahNNdMBWOKwQtCSj$tNS3NM3tnMj+71glzA$AGIKkgscZnOasj+NaafZavTqrl1N1sj2NSFzlTRqKkIqJNRrmkFZSo0D1rRNz1MSkOcNS9rt2o2NMIGqBNIGxKcDoL+xIM9r+IKlFltSoO-TsdgeIK0Il3+$FSl-SrpT+-Nl$Du91NMqrP$ufOyM+rd-VdjS7xBflW2GqNjwDfFKleBvWro-N1NGex9tk9NmqWO1Z3toOucGfzUpkoxPCSx9k2tBBped7NrxttngVO1RdlR-KGTOFcR+9MaX-9e$pBhxvDNqoRTRMxvaID+9PB3kLeLcCc1rBx+WS+aDVBe4+WKXpX5C+3K7xRsLJ+3ayR2UoGKSZGtDqrijfecSdS7KRIBMghNDnIJ2rl2SAgA313tGwoPj4KuKeYxtTILNdKl-Oy+oTmZjp8wKh+9tGnpokeDBLNO3+5IubqDNARkaNALBB3OcR8wlwcP2cRBthS0$0l8$GMXM+uBOjAS4MCPqbUZIqmtoZhQoNIKjRqFK8L0iGNoLSW2NOKeUyYIKLrTDDGFWMlFzvK-sBa3-WOoaDC$TBDNgvSpuSipDMiODTrbm8W2r+2SqKaIXgbZSW9+NTH4N1+yVk1$lKtRIaSK9p8Lz1+rzgBlhQhOK$KBd$ONUMtoBOiG$sryfqzgpSqVGrknQiI82gehNMhYZ+rJrvKqTF$Qx+zfWhIJVHsIuGOWIJyamlljgBhBkmH+Ka4pnROryXonA5PuCmNUYjIqgPfsJ$P1NHIM2QnbJ1KBN5PeNm1RS+tNiu4+BcRIKDKVfOD5F50Qv1s89Kf24EZrvyrhMOIifqMNYroIM3oxaMKEoKOHT0gq2vHNXzUbFOdts9hKNW2NL+hpt2GNBVLWrIko2BhOHKvD1If9UrwkRZov+M2k31rd1Z-GPaBzzFuar+DmIBrysKtAF$czciSLKmrotNtqhBIh4rNB-HscA9OJreIWhu7F4mrQiIhimpefznIOXFUZPmmR7-vMfv0Kc+fOdwRLIq9oXLDlDDejQ2KhcZpL3o$MYccSRZESLcBYWgR3Z-tj2G7B4KeXEcKMRJc-NF1R2AwolGJLvSsm4a+xc+Bl19DM+htKcuPCkSy3d2KckEBGKCXBScecjC8oytM7clyoNeNNhpKjtyZ1DNct8xj7dlKjKIvqyf331r+Mtl8ws7UxjZDw3q3fIeYfwByz9jWJB+KDIplfU-1y7K0Tb7dP-e-7-UDYyKcMQqRBGrLKt2CfOJgHvWUROKGWSNB+Rl1jzygD3EDpOlxLt+nVFo9QdXFsiqR8aG2zLKfIS$v3el1sN3DlFzP+jKvdj2iVEJtd81N-zpi1tF4NSXPflLWSzQEdNwX27EgpegKsA+yLRXjKNvbFjWubWatZEkOLvgyaW+PhGjxX0tVhDqcwdJamtsE4qDzP3xtLwcCb1+RWyMvqUyO9rFH-faA$BSOTmep73ZBGaXVkiHkGtSImEah$+INpEug-SWWr3G-Bdj9StuHKs9g+Y7EGz8gwN2A8ZMVSdzwXded8kOZoBHFaF83njo+7od7jUMFFqCH3oNCv1fz8+WT20vOWsN9RGolNIuZXmqn1fbVde9SzOxtU-ijCUe97lIv8x1WO3z7Ch+1BvAW7WK9fdsXtlyQ+z+UUzLrMK5mjz7gK+SB8$NtAumpBGbifOvvDTqV-VEB+XxVSgLCwv+c9TKW0RlC8kOscvIH5bbs3KLCSkb-8MM9FCO9BaXFOiBCFqRkMShjOG4CbZrnB8tKeqPqYkM+70K-AZ91NhIBwj$FaDMNnBjglqN4zPREzI0zKgKgK0nCLUIkRE9icA-mXbQ3fnKsWBKLLzHhuiSN-DogZiTSDCciaJEEOkLMo$Nl03RT+W7fQS9MT8-zlGzqyaZ7wXZ51zTLziDKPXMjQt9EcNZc8i1N4HVPMuTnSLUeI1Dl+dB+SwQORCEcM-KIDywGS1Q-mAWKTKzIRReo+pnTe+SsLvzWjoO1M9oq8ZBMOuBxUdszMePk9xKW3805LqeHsgar8aIA1aCvDLimBBMIozkfEWI$oa-qR$tOIiiR9OLB2d8VjfkVk0M2zGV5CFuYXPcR3tW+RXOYaeWuLiOfeZoFcKjMZqMr$qblaACoA4TCNelZhD$WwDUhtSn$IMjo5p9hOByKNMqvHA4nNWIdZ8dENBpzu$Lju0WW$k1J0pq8s9lfdyuvM$4wocOWtoF7Zh33qKB-W+lto2KPPHdsps745$3NTdzV9BDYTraRXkSCxgaTu1krJoLWSDCCzz1NGhZvycxTt9tZyDLYoNnusQWqaG2KcpzakshjmfgTGjXyh$SWwMxk-vwmM8UgXo$Lag2-pGGsvPCV0IMMMnWCwvtNU47tzkXFWIdhNq4RBbRC9jncUIlLQXEMOb9iNhEITjaHjAL8cOMXH051qX3u4g1WdINfjYPPq1j31DyufN1XthUuhDX2CEKFg5KOvQAGBFsB+8qRIElyVBDG5N+zSAgzO$KMwWv1n14m4tDQI4sEpj12efHH4qTF9UI+lMTYeb1MVOGQx0eehXKJSBlVOQe4XDpJ-77ftmiBsNa9kbgREha-$n7xRstHxnsNGJn0LlgGBy1dVtIkhSMIxGU9IN3bKeRffckLIuoullMM3hg800HDsGa0rSl0Hx0+tUsY0cUq25cGsrr+XBjmrTg$$7l$sG1qjmIYWo+QrCOjsbr9dEO0XmaFWTXREsrca31BMg2SNBc+cchDtshzz90Gr9Wxjuwu$z0zEBLRdkUFcNlKB8I3akW3cyUyaDctj3Nx3ZUGcHI9X2jNUGNuMJOkjPMqzKUKe20+jZ+oD4zIsasF1l$j0j1oEBNlzSWQl8wQhhMBrVDMTZc+DTH4cxaWdlOf2oc4tDDoLw0c0zUOqSV$cK7naBBOqElf13X2afvGchUtTXKkOq9PN7XasXEp+lDnaSzc$r0MdDDVrTfvcvUmNCrTH+ttXojXS8g5gpT5UgzwHbaEIRfg0jEYlqs4Mlr$O0jTURU2hQXZ-isTlOe+Eq7By0MBSf5+MEdRf13MqasTaR-POhLChmNdrpDoKBjt9hdd9EdLsbDZpZ-b0ZyKwoajtfgNXjgy3RC$gqp8cswu2LaD$ogAzuIUzt5J$HhQjQ3oIJUnUIXJOezFlUjZX+Utr2E-a2193+toTDgp3X1T0MfWKFHeLw0GtfS4gOpXaBNXEnlmjsfQ1hvGM9E+izlIExKSUqSJUESaIHlDU+KQj3f8hh+q2Mh+hOL2UXtTsF5uXoX+Dkf8awfRwjTuLJfqS+V3OkIBDZRD+Dj3WTa2s4jeMoKf2gcPWTaWXmKkcp+exWdua++eRR1xs0SjyUhRX0DSIKpmNKV$T4U9MjCjRBNBN5NuB$U++RLS3jt+Eo0kdScoUog4IkEjqkKRvfS+I$tDX-ljNaDoMoNuwGdoh+fjgsTEtBpbIvEcgNX0Xor0lmI3XjX+pF5MUjMMMKx+tTHoHs$XKBcrlq+3tSwozeMUhIvB2GyxXBN8d+TncpcxdREohuDB2EWuv3+A9yp3EI7tq+11qWpNHGDoTB21piHF1Sqj-sgxILf+3DMisujih+DTs4+rSIvKKxjf25wbLsfZ9tH21yLccwy8rTWWXojaWF0GNOa+NUXI-hHM3pOJUcDbR1WlqlqRDuTX3DKYi+OcHf7EOdihOkOpUn11LnHLhSWuHuI3sl1SwbLjRN-Ox+jt7KqlNkfqDl9Bf+KBrJaIER+OBoBLfN7dpaWKRNpyIoNsjm+GqNRJlJgLiDTG-QNeEv7rgv90TvprfsLCjpSqN7XjhiDqtmNCrEXo1qpRiV2ir3ws9NxxgNVhxhEE05tAW40h5G2cVB$oMqSC7hfFB0jrE3t4w+7SxHjPN2XkNc2GCEBhrxNSB3DSqVrxrweylK3j3BT4I8eKVWlo+J0cerzRHtxB2w-lLRl51QXgrtE5OnM0K8yO5Gv1ifOlcatcle99f3N1itXB7hf1q8WNdl$-roM8raU9MgHGtu+hIq3xW8dysAhJfMrSVbxrE8t-ePt+OXXbz4d0371k78gqg8KK58qeOR2LaO2TaKzE5+S2g+Cf1qSeVZi+c5TXTIEqidf8a8-1aCLIfv+yKMDoMmWfIOL1H$I3d3ibUj+hNaTzaDMt5MfRcBIzCrdsyIOVNMD2tAOQ$IC$zXd+CVHOrXv9rslyBJTuSRrMlXKBDGi113Ud2RtocmyX+kqy1DjkOd$m7+vG$5sWiD7hgcehqNRRsbyNzX-FxmVpjzDMtlB8pxj2lQcXB45MCUK3s4-HKe1v1y0GyUSSK3lD7YCi-+cHjtCwS5dq$r9jXtD80DxdhkHjCDrGLRfW+RIWhm9KsTNRlpvcyFp8tkRL1gjufw1DwrqD$dr8NSKX+P1blQdBj5Xg389Q1U9MeQ9ZV1BV-BO+wt0nswRj9ipxDjHlEHwmyL9jED-h-VgTdiOfSq+s9petL2dKpcHBISDtKhwPqRDLDUpPLCj-hYzCNyixD2MCLNq8fRNdqmVRvgjort7hl7xhf81tjNsNdB+SLv50sI7tiqDteQhAlnNu33Vodm$QN7qU--lAalhFxB5Gv3OtgnSDadqRc1lNU7EqygV$gg9jxlBzpXhkXM$DxBImleTHXIp$TzCC7YESW2N+yQvQLujX7IUn2j0JOq2jdQLG19emtptM-BlU+W-xUxz0M$E1yTOXpRtPcHd-D30QBdDArADFBl7+1lKOpB3IaxIPSq25$M7Ef2ldRqvARKV4+ViuMR7A9vllyLRjLkOltA7UaIfJpVgchkOnfyaU7Ie+ax7gthTnKrCiVBPmSWSavLpTX+Cf3BhDr8ijca3hO+2XSn37auShUXwJX2Iei7OG7n$nHGpl-pNQpSvqrlXSGVrBtfykekawxB$rqj19tjgHIlpXKgfN7ag+C+923G3GTu+EEHcxfnBprOUrIfSMGH0VdNi+cyp+S8aWEPBfD+1PwGleCNlyTMaIDfu5yKjTRm3naSmSNaw4K+aqBdjeTNhiXZRZuuIl+jgVy+iZX2wb7uBttw7KQg-H-BdROxVpvI5pRpR4y4yh1xeRMq+qMEE-i4sICSJKgBL9v3iPWJXbdYEaEbUb019vLrhcirzac2I3dglglqs9aWhrRYleBvp7v9wtuqjqS-5Wi4HXMo2+qmRRgyKiqNL9j0DBciNtNZ92vgcHcqxKf+Eq5axSGvqRScfV1sEbpd74cxEni71f-mSq5qwx+bBo-BtoR+r1fBhfc$M2MD9XKDWZ8I9Aexi-Hsrm+un-UZ+rfNRS7Fw5qD3otqq$q+ln5M0JHLyLqXxq9gMD+X3DIfGjMhvcCDH4chvXOBPSPeAf$e8tYw9geScTiq285N-4Rpy$vUNU2NL8i7UnVn-pjlb3aGqyfmRgaIM+ok1qKOmB+0RatC5CvCemp99FJxpNHFZmeAXBbVBDvslarT+GbsESfnakMqI3hAWxxL12UWmeHWb$yL1E9xqrO8iCUGI3zWOhdhWSjtFXemcXjsav5R4aH4TkWCXKBCC4qxaByUIuNuIoCS8R$mtA9HlCva5M1RbG+D9Vs8xn-IvRexpSmxv4vCx7vGIL19IWpmlYWGytAbl1UhGc9r0vpySHdehb-IpceKop5v4oqnaeCJLxl9s2cpwJeCgijSjqPqDQRO7pCSNM3Hf8hWpBjn087HU+NbUpak+ocHHmrBkm+uDkVzf+jVi0RlNfn1mu3usT5yCx5yFHLRFo+Z$bVvZudtDMr8SlIrBw0ZtH7IZysZiMu8BJOqTePOQO8Q2OJ5jczFgkd1p$XqMh3qKr-xsoZy0aRonsuCOtAEX4R1mUw$5NYx9xIweQ9jl$eSM1ipaEM+h1hfODTh73O2q$V8xBju1vufijSHOD$lyCOuU5RWJeGNvvCS5875hb01GsGEzbzqcxsldBcS1nShtqoSRF1CqAB+yLzFWS8h0E8TTYR17bTzEGrDUCql+eeFJqAof7474zP0+9LRUtPuvQrViZuGkXq-vjzjsdYfZhsBVNbq8-daxCp$VgUhdEa4B1uJ9LLPUBh+I2OfT0iGodtFUAsg$d37Vi19K-eE1+QtA39ADdPRDqjkQy-BaWePM7CJhz73Ww2AJNRplp1jQ0embzBWp7xFgUVt0t0va1At4y$IyfT01-YDyXrTUtu+OjYygD$ExIWp+e$4D+kLLaVutdhxqTyjEDVEdEqNqDeEG+nPhwOwORbOxuSxKdK+h-IcpSmcL7sbvqKS4V+gODDUwCAMps295jsBR+Zm9VLMMSbD$Zb-1StTH7b1JdVdT7J5BllQTW0Au3huWzLRQqxiPf1uw7opoGWI9fpRhxL8zSrBYgpjXyPlImQmPnIpm-8pJ7A+blrCmu+oaxvfIcRlt8DED$kxUa-3odKPvfKqi8EACNpqJ0WwjxeUup17qDllXMZvgfx+MEdxUmSzgUcjZjDUtMflS2Bazm7bwj+8P95lYiLdI30bx$tWqfIW74OH05SWKMIfK4KDT0ymFvkE4PgEFD39Rff-ueHs1QkBDZywHkKfGfnX+fu+t7GXLuTkhw-7uSEsX7ybvbvslA8xsbB-19T+s9NGPM4sEMAIYt1Gk2Mtlt1sUzyrP9$B9j5Gyp-nnnoQFKwgRtjWP88JH84GzLLwHDYqqWDZ92mI0A7OyhqRTGO$GFG094ypv1qcdH4+03PRa-mhbfMGvSC95MdH-8$BxjLMjaQuMvdWjtiTtiJqpwSdtEc3HK+riI+ev+rPN3ALTMjw9lsjIcS++RLK-IGt+PNXwnhKasZoLS7dMyrwCmMVrt+DUohnxqLNqIsfucSCGp+$aDzAVHSINcDI-cOFsKU9bvcj9bgxbaAzZPOVo+O2+vWzQNDRrIIETnKamaePO1RKnUPrtNQKlqyQ-XUoFVFZKPOqoKrIKIs$vNWd+OnqIS+YgCGGqtILBp-kzlURZlWOzjrS3F+gSPSh-LB3sLw4A+mZjlCocSgGgbBuKEr+vsf3bNvm$OtcDK1i4N+-BNdoO$WDLRtNBGjBZB83cMSRrL+fCsS5fTM$DAl8MzA+Mj$MtarmrLexR7INyrUgL8TtqSMfxskyTDroyMdDOqLyTBd9Fz3BoCNFdHm3rFtQG3fSG2Nr3+tNGCVK-QDoMoqoB8tSu1G3bNWKCOqKeqLR$I4U+nfzJyeNRcnLpDZy8v7qV7v1+lN8WhPRtNR3BVKLGIgDrqCSDG8LEaybz2qeG$wMYB$zD73SxdSFTUcMzsBGtc-TuHX+CyDS9lI21eyQK5z$hxZNu3bNtLzKt2CaNyIAy8LlfaGRSVhIclQSqLzzqS9SSEKSlvsTGBofkLEZsBGL+1rM9GttcyZuLlNcM9PTAK4eaG-RMdqltmD5Bhe5oEjTHrMre9EODStq+o1s8XroBlhqf-DrKEcoMfqScdLlz1L+giOnyDbcvl+KqkbLxBcJM4IXDFZzhdZyRLmOsN1qR7dSFBBcm-80SoL0teKxh2qm8ZTSkt$C$IGarfghf8-T-rycH4Zr7qc-S$IM3FKbl$wDSRMqpkwMyKSbDScBVrIPTvrSLFCeGvGMUIzOef4ohtLI3iIPcUsrFiSe7yfKHNbeuOEqB8NdcOKGmqq1q-13hzZ8emGpef51$8lXGlmyJtMKyXnNJLconKIhx+w1+wrk+NKyMjfTZg9+wzYjIntecAMirRzi52K+9GgDv3tvfqpjcrno4grBLxL3hpsaDMvNWRm8Tv1F$HDeKImhZWM2AjQLmXwSHqHe-wI1KUBPmVqldNsrh$rSNfmBOwNx1$IQKtZH8NMwt2bVztuK7qgFNmrWMTEJSGrqfyLlVplgXK9K9OtPrd-wBKbqSS+yNjZNBGuWToxmcwK4z+iEzaCw+xu$RrS3Ob$OVee7c1LqyCZqSNWTXv4zVMsRIqMM+YrMNZNYK-O9h7gmRQIL8wMBho3aOFFfoEZsywrtmr+rvKGeOvilviNLlsEiS18qBKc3oNALKOZddKMe9FHISjdhdQxan+881PVqoFLMIoxjCtRwRIHeXHj$drhPne-O3Z$AporTugFPtB0aRNxCkdP1+R9lx$zIFOP4KQYTZjfTXpGo$CY$2oS-1tmKontrdVGVOvfDfDBBNDyzjmSLSw+tfz$SBcRrfX1KKKR0GK8+erTKG0vPtCaZ+blAGRlNbaKRR-lKNMWnBF0pK7LDoDNsBLmTqauIQzFeKRZ82f3sBSOGNYObtsYGxD3yA+b$cOOHlZBbrPONQLU0l4brXKA1BSIB2fjGgVZ9KYc5oBlDaAvUpNsoV2joKIaGpHCdZyjVb3ITcfuwfqCAEDnYQirWKE8pGB8BE+hoSOZfYM3xTpIzzbETQB+LqrvdROFRZf44c8TDT2NLCIGqJzyM-OMN7qZfYh9tOYdIEv7$+rAp-R-Vi+OB+SMAavtxpCuoBKR2R99$7dd-mLMSjMNbtaNwBpMFTpex+jqKNBNdmtZf5s3Rr4lnE4dD2XpSE+d4dBrtgtTIMGOGd4suoMj3zGuKvNsOCwj23y2uDZMjKQqsrX2rNruNkfSODRCIrINjlEODBpG5qrWVvOCKgo9ZNROzBJypfAOrttkpMOklCZrd-Zt3SAKSdp-uxx1SEvYFt9$-oGAbVzGElRKN-ER+FcS$vCZKTS-dj7K8MtgILn-CGDq333+qON0-jZgotorlHsFIqReXRgTcq+w+DKcOKSwYktZwBpObCIweizUO-F0zxhHmc+zAyeyq83B7YNaczl-4JhtelYOx3R+tKB8seHAMwaiaUlofUqhwen2VauGA8BA-jtu9Qd-KMZ0hHsqqTG8NXw8QqJyTx3ZO-qW84dWcN8rm-aefdQYD7q8MNpuPn-DOCwBxShNImQKQhWVKfNfTYRTSmuOXIftQaT4afQhJva53w8XBU8NeJv19+KmzdHqruUBw2SyKwBwO28RY7Q2JXlNMBmh8OtKEFOt-Wf5unxh7jKvAP9qaelNe22ORJXV8Nekljzy+owL8KGeib5SNJ$Z$Z8NeEw95dQa7LMG3sibeS2aaB$1KE5xY5BUNzGj3ORGKsCoWk4H4F7YbyWr4IwojKnO8b+b5akMNS3n-S+OO1XRQXRyJGQ+gMHB0M9vmO+x+U5+QTMxRZImQhYICSI7zCMADSTCgKlKRRq$mRJ8eL5OcJa1$VLQtqm-n$GOgo$Gw+gR-HDgXtmuD4lAoSKESR7j0qVecm-eNsBcmnDKykwqoE8OzjRDnldcCKETazj4tJeszyaRvBY$VMI7DY58IyRz$RXfHKsvt+XdFlzOUl1N-GTFRFFUz$OpsSTSpTeLneb+0s3RftrHFvKUbjpMfvMx3$XFmFjbN2cpq2EfIHlOKBxcfQTcfIgyHLe9x-z7o48112E-pMhRq$u+T3NELnSeOlF++aWDEB8MNI0tqtWFm-LhhAx4$w8CFXbttffjH4k8kOyEBx$S+XNHKndxFKxwHlaSsGPeLzeuH9BBEQ8NeGMBB+jxM88Zkg+S2uUFfCGADfjhjDe0jowBWKhBLI-nSegoWeDqR9hR0bLxxyO-UKuzpRTGAx+TSGoS2cpNXmeZsDpdszL+1c9ozbmfOBXxV3z$M8psQhu7SXlpZwBftwGcXyJ4rO-mQS5B2jM$SwXIL7D5oJDB8vTm0LVDqSewyuhYdyB5O2MyZ9jHQznjpMNTpFD+S99J+7S5MLMDJnLKp+bDVomF3$SmWyHiO5hdkRt+zRy449ReamCU$3xY$ZXlrCkLyM4MX37ENbtkR4t7CIfnLXKGtKMTo4KfWm2lXTlIUb+XjtCMCYvi$t9dIKSkrdyOcQj3RYFn9IuOw-w+pRGNO8weP3Lus1KQ4C8LWbwRa2pvXW9yjebODZT$xiML9nM2391fVxYLAk0js9CQIp4XWF88CFsxvEQxAWp-remURCHVd5GLkBAt-RbUTRm$GkfAzcVwWTyL$mkIBS8RWWaXUokkhuF1SAWhN$FsMeSl8BjW99dEa8LWfUBwHcg288MNAUOtllu9IW$89+EUp5SnvbH0XLWkYvT+IZ5HT8WOiYC7W9xAk9kUWlN57W9RBj-kpClN5wWObojOXhIaufO0KGS$zmFIUNCYUv9q$Gks+m9VCfS91fg9-CEUCBWd9jWjDfuTzdbEf9PWW3ug+PVkrdc3WwDACgz-wW3xe$1s5+aefS0n$rrV9MlfP5mfj+yjmkyW1LVUyqnFjC3QIEL9yEqbWj$kJvcLznj9xC$iDqZE9BqHloQHbSd1RgRcUUTKCgwklgwicURbcEcjPCscyZUWxqC5DqI0rpZ0BvMC5De+ZgpZWBbwCSXWIH4v-dOGsCBXtIfkRdshnvNhXWZaPBDD+bYEYLMv8ryRhUxXjik7ym$LRDi93WwXeub4LXsvRnHtUXtV-5Uj9x8VbqL11-ytsnx-Cg9-FG-yEUURkVjqRFP3BkUjnij$kcFO8LXgqkjWwUcvH-vGUQDQjjKAF0H9GsqgUVPX$vl8710yk0+bjkO$u5W0druLEziZ8VxE18MMENDkw54SorS9OOHK2yxVx4XMbQK3o4oNdLyTVv1MSKIqyfSuDjxmHJjrZ0V3tIoEQKxfJKqJa7mkM+HLEzeKO0im+TA+TSsQ3ACXfpvJCZLhCfSMPELDFVMcJV2XLFf4r7NDdoOyKKKTEtichJrtNStKjcjqZS$CSuIUd5UHBUMDu+OaROAcTOblryN1IxBvKrhgocaqqdMO-O-jwCOKKBHKMKjKKdMOd7NQNJSMO7eUCr+AsM1frM+q7scLr2NqzAdjWVqgnKFQAmlsnKNODb+CNsiKK+1+N2OKKXt$UXkeNblQ9rtTqIqKqBpigOhKIyOXkiKEi1wHxpHUkkvACNoOVa5lI8bazUiKKV18kvAdMO7Xq+Ts8kCoqK3f3G3Hh3neAKtAtjOcg0D+CNpoW7k2i4UdppNrSjopTiKIgnCApi28SOt2IlB-OMPHK+lxfKYGNKgtskrtKqKK+G3S3Sp$WqNIKO97ZN0eoIVnPNhK9d30q+WsgvzdkiKNOwn0qNBBl+dZBAqowGMjzHBAjwJDQntLBLQSTZojKIO4KWOZog7YlDzM4XkD3qLfuf92xl+xyf8+8$mKkKVO-zbk1wQoIGI3zHQ5wCSyKUCDmkABEh-ttIMp0xnbzHWNo+o3CIsK0QOcx+CGcfKoN8ARKF7Zy+OI8nlzmBdKjK8KKo+qLBopt0rKk+egRltoMj-aL3t0TRlfSZcRuhy2S1mKKrSGBotoIo3iQeKcdaON2aUNtT29XR+OQOTU+prk9sGiILoS4KKNlv5pOyOgaVpbit9TBiomnqQ2PYwaJLX1ckUNtiPf9IISDuBnKKK0EfCKK"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: Wmah1Ssngdl4ynmCnN7cog==$t6p4Swa8Ayi5u0lW8kx7Uw==\r\nset-cookie: cf_clearance=2yCtCOENn5LzF1bdhEhjNBPgIa6LpTfD53Fdchv4eKA-1778969152-1.2.1.1-jVkoXRmSq_.CMbQaYH5fKl2BATSPLvCAtDnSi10YmvuiiShp0.xImvB1v.mRBpKMSuPtkjWsRGXld_o1d2REaJP2AOfv7xJ1CMSeGQBa03ev_p0Yw.jTg..t1I8MwesFJWT6F2HvyotFBjJCS9F9iYbjPyfrv2vClmtO7KTjDYODcOuqY9ZPTSfWzJ1g4V2UmiiLC2PET1bVBXJasvkL_SL3O8nLts0YYSlTdKwK_aeB6NuzZbpoX6c284Zdapc78TcY6j9cGcpPp1lnOg.qKsXhoitPSwfLokTyCTch1krEXn9I7Ky8eSS6o84VWKtlCtg6YZAJ4Ma9FBNhybcHtQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ondotokenization.com; Expires=Sun, 16 May 2027 22:05:52 GMT\r\ntiming-allow-origin: https://ondotokenization.com\r\ndate: Sat, 16 May 2026 22:05:52 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fcdafb32b08712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T10:49:09.033131Z","times_seen":17797862,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/flowtraders.svg","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /flowtraders.svg HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocVx0Z4jnGX5paxD4I3BGnApvluku7wkRSN1lZRi7viz4OUcsPeA19UxfPCfDaD7k7d8LCMxx%2BLWYMozbDDNfr92qmh9GXeZfx31FUA2d%2FrJPm26rwq1OnYE5%2Bb80VYMFUx%2F31Yk5w%3D%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a04ebf7-113a\"\r\ncf-ray: 9fcdafad6ab2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4410,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0af0cb7314e2caa71b930ed30737472","sha1":"d804747ee6daf90b373330ec488f18bd7ad7bbe0","sha256":"731d164f304f13189bc2603a7f81cc8338cd82a3ce1ed11c2ebfa3de4f308f26","sha512":"537db226b24f53d220e370f1cfbeea7a2c7c656f0766f7cb7778eb6ead6a76f1e2a73c22df37130a054ba3957e0cc8181445e028d86c3ce1632b1cedb2958a3f","ssdeep":"48:yCn3r1zCbRR3mIZTy2spMELFgtX4hxU6MqI22TXAoy5lAY6lYECuJgRwqlbK86Im:dzCHEBMELFgtohxU9xTXnyKmD/lSnPd","tlshash":"239143a8a3bce2dcdcc0b7ed3f2de434551591f39b094408b7af24166b5842e8994bc3","first_seen":"2025-05-28T09:18:11.319904Z","last_seen":"2026-05-18T11:55:27.713738Z","times_seen":6,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/ondo_finance.png","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /ondo_finance.png HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 21:24:07 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6a04ebf7-f08c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiDqepQCESTGU21uf3j4oFgkbxEuVTvMvq4R%2Bl41zXoY8NpntGMYPyEmLvUc9xW2ePXQL7ruPbZ6PFfftPaS40t%2FfoJzAUa%2BM0Ucei4ZxSFxtz9klNkmYWLoeO6e0%2FURMdQmN8ZnkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcdafad7ab4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 680 x 350, 8-bit/color RGBA, non-interlaced","md5":"9b59d283cfc3cab706159699684bd046","sha1":"6523c78a9ed013f963d81daa734cfa987d74ca48","sha256":"0c8501e072d0612419124f7354e3abf8e11b3740829b52d0a6360bf125bfbfde","sha512":"53386005a5794d4743fb2cfb8f5a95fcde21779dadfb4a43496a4035cc6126f5e9341e6b57aa62aedc9c0bb2ba0247856583aafcc1e0937a9f20149d0132aaa0","ssdeep":"1536:7BSCrG5Qu/Kg4gFeCXzWoKTrVlsa0tUW4r5wNW:9vrsQuHFoeJK55OW","tlshash":"9c53f197dd0cef1b455326b1ab7d10ccc02039fb568f064dee69bbb29b2163a3663950","first_seen":"2025-05-28T09:18:11.275504Z","last_seen":"2026-05-18T11:55:27.716234Z","times_seen":6,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondo.foundation/fonts/AllianceNo1SemiBold/font.woff2","fqdn":"ondo.foundation","domain":"ondo.foundation","tld":"foundation"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:51.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 06:12:06 GMT","end":"Fri, 24 Jul 2026 06:12:05 GMT"},"fingerprint":{"sha1":"49:0D:C2:39:4B:82:89:10:FD:99:59:4B:84:7E:57:C0:6A:A0:B6:78","sha256":"A7:ED:9E:16:C1:33:7B:6F:80:35:1F:AF:4A:87:EB:58:BF:14:25:5F:F7:7B:AB:E2:10:A2:1B:F2:3E:C7:C3:EE"}}},"request":{"raw":"GET /fonts/AllianceNo1SemiBold/font.woff2 HTTP/1.1\r\nHost: ondo.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ondotokenization.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondotokenization.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1561751\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 16 May 2026 22:05:51 GMT\r\netag: \"443a3ffed71282c8da64bbfc3b2cb5bb\"\r\nlast-modified: Tue, 28 Apr 2026 20:16:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /fonts/AllianceNo1SemiBold/font.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lmfck-1778969151716-b57f366e79fc\r\ncontent-length: 32756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32756, version 0.0","md5":"443a3ffed71282c8da64bbfc3b2cb5bb","sha1":"a1fec76b9367ac57a95b469708a7c72d98ab93a8","sha256":"b0abb02540b52a90f4411121f10ca3133349d5191e0169ef613861f6cf73ca74","sha512":"7717a0bb9af7e567708a115e9bdc2f165d13f39feee7019d8cb37238744a16d58900e29478cbe212685acd06a1b021810cc62e4700c968781db2490ceb5f0d66","ssdeep":"768:KgT7FqkUdvBYr93tnHlcP6A15VDMXKD3B9iX9Og:Vxqk/9dnH6pB3BUNOg","tlshash":"73e2f1417f4ba76d9c044b89c2ce3fcf78d4245de0982aecec1951fbe8904259a299f8","first_seen":"2025-03-16T13:23:15.899948Z","last_seen":"2026-06-28T16:01:02.526787Z","times_seen":33,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":105,"dns":65,"connect":1,"send":0,"wait":25,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondotokenization.com/kv6o8zdp.php?m=2964948","fqdn":"ondotokenization.com","domain":"ondotokenization.com","tld":"com"},"ip":{"addr":"172.67.153.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondotokenization.com/","date":"2026-05-16T22:05:52.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondotokenization.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 23:06:08 GMT","end":"Mon, 10 Aug 2026 23:06:07 GMT"},"fingerprint":{"sha1":"2D:8A:95:A4:95:55:81:CC:02:6B:43:39:1F:2D:45:9E:83:AB:EC:BE","sha256":"92:77:93:1B:64:3B:9D:44:12:06:C5:24:40:34:EA:D9:ED:2D:85:0B:26:E3:D9:BC:85:47:30:4F:84:97:39:01"}}},"request":{"raw":"GET /kv6o8zdp.php?m=2964948 HTTP/1.1\r\nHost: ondotokenization.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondotokenization.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 22:05:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u46twQiKZAXwuGnDWybgmi8%2B%2B5aap0mgvGviaXENvA387avBMSRC6gkQoANLojd%2Fxd3CmQ3ownOi1vZ4kIlck5NOOrSOzLRohz9hiZ6wAmXNOYfJ6FlJbdmmf2Av27aAvarN4DoH9A%3D%3D\"}]}\r\ncf-ray: 9fcdafb1faf5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330644,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b36250eb4855aea4c5b4213b208d11c","sha1":"07094de0b7fd4dee47736c45ee9516df1722e90d","sha256":"c522f343607a92591357ef7bac10b9fc0b83421215c54f4192446a8f1d9180ab","sha512":"2f8ec3cd8b1a318205bd068af08858d6ed6fe8d3f26cb8467b5c105754a35c870926d5296323dfc52ff1ee031570d83c29acfdf2b80fd241247a9ce83e9d61d4","ssdeep":"24576:ZyjCq4rCMBZ849RxN4soD5JaHTRsq4BiTWXUu5DsUVemU:ZWdMhfxNeeHFVZiz0mU","tlshash":"ae2523889c55a6e60348265b307b5f1f66e02b05447d52c3e69cedc23eaef9493cf839","first_seen":"2026-05-16T18:14:04.614027Z","last_seen":"2026-05-16T22:06:28.247306Z","times_seen":3,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ondotokenization.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}