{"report_id":"42c8585c-30b7-4bc0-8cf3-8057bb5a58da","version":0,"status":"done","tags":[],"date":"2026-09-05T01:38:22Z","url":{"schema":"https","addr":"origin-protocol.org/","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"104.21.95.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"origin-protocol.org/","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"title":"Origin Protocol | Origin Protocol DeFi Ecosystem","dom":{"size":33679,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2516)","md5":"130c0247ef709ffa8f1372bf27d416c8","sha1":"f3b680a7a29ba62a40006e40dacd6be2b3fb52f1","sha256":"6b39a786745cef99cdae05b28b2c11d2e277efc5a25b97588651a9b47427a003","sha512":"657afa307463bebc088593a740218051f87ae387dd2fbd388a470c97e6a7a233dd7a24e0ec6a7f7b16b9b5bc6a93228ee159a06f67956717128118b063c2870e","ssdeep":"384:DupZkQmDcAdg+CSWXKLRlfJCtvwAINJDL1JXR:EZkQmwqgvsR2vwAINFL1NR","tlshash":"b0e2b5675deb04227803c8a47b61a7cbf764d813c98bc5257bae47a48f4add1ce9324c","dom_hash":"domhashc229127b88ba2c9fa12b19915665990f","first_seen":"2026-08-17T03:53:47.529272Z","last_seen":"2026-09-05T01:38:23.180801Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"origin-protocol.org/","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"104.21.95.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:38:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"origin-protocol.org","ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-18","domain_rank":0,"first_seen":"2026-08-17T03:53:43.47162Z","last_seen":"2026-08-17T03:53:43.47162Z","alert_count":12,"request_count":6,"received_data":470739,"sent_data":2980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"origin-protocol.org/","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:37:47.482Z","timestamp":1788572267482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-store\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp1VukEc3CPfka8qWdhd%2FPzyKuO0i41dnb9GHwqwt0RFSFtN%2B%2FkdRiLRVYxxlcn5Wt3eUfExW7bgibLCVzgDW%2FBSAfKLaZ73SxmKMj%2BrF788lImMnqha%2BpQdBQ%2BsO5zFr4aqWhL6\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a36182d3c90856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33614,"size_decoded":9245,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2516)","md5":"54c49b99f321e56d3620dcc11e437830","sha1":"3e07678ffbeb772d6c585565163dd10610d3c883","sha256":"1ef9ffa058ffeb4d59f138bdf201af39186d8c9f8d70a7a58393b9b1ba24bc41","sha512":"165b5a7136cd0c9a76b4814773e09aba3a160f55663a0b2ca94b65d86c769c19157ba6b4ff9cbbc781f4adefa6dfe246b8c766842e53091d0e80643f31d85669","ssdeep":"384:9uQZkQmDcAdg+CSWXKLRlu47tvwAFKDWYBKy:LZkQmwqgvsR7vwAFAWYMy","tlshash":"3fe2a5275deb04227843c8a47b61a7cbf764d813c98bc5257bae47a48f4add1ce9324c","first_seen":"2026-08-17T03:53:47.530373Z","last_seen":"2026-09-05T01:38:23.18243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3640,"timings":{"blocked":-1,"dns":67,"connect":1,"send":0,"wait":443,"receive":0,"ssl":3129},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origin-protocol.org/index-B77lyCCA.css","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://origin-protocol.org/","date":"2026-09-05T01:37:51.307Z","timestamp":1788572271307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET /index-B77lyCCA.css HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://origin-protocol.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 13:02:11 GMT\r\netag: \"6d8b-6558c4cbac3c3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxFJhkumYnbS4LwSKLkjCL8CLhDc%2BzB1sb%2F9cOB%2Fg5F9lUAkyjj3hvQwpBd9vb2Etal8g4qLp6bDjdp2SEf4KaCz8QxN4sTfrHgqOOvHpGGx%2BH%2FZBwJ8kiebupH%2BY12%2B9KYjegw5\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36182d7ad19b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28043,"size_decoded":5335,"mime_type":"text/css","magic":"ASCII text, with very long lines (28042)","md5":"6004bc7a7cc3196d23c58ec6d22ede0d","sha1":"1650bb5edba11e742f0639299ffafb5ac46b418a","sha256":"112150db3c88e36706df6249b1896a4353d729a14a066084b80a7ce5d2dc448f","sha512":"e6ecabe46ba61019981f87d2670e768dad541511242dcdf124eab29901d0affcc7209ab579f058825ed48ad1f787cdf8a51989668f50dc023ca830771fa55f34","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1oKPFEINi:P56UJoYBzQmSoKPFEwi","tlshash":"76c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-11-20T19:09:40.75203Z","last_seen":"2026-09-05T01:38:23.183517Z","times_seen":96,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origin-protocol.org/favicon.ico","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://origin-protocol.org/","date":"2026-09-05T01:37:51.409Z","timestamp":1788572271409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://origin-protocol.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lbf8EcWXoMRi6EyzfaSzj6vlhzmMGF0psDI6YE2HikBO1NmCe8IuXrlvkIJuZv5v9fWEHIPONRAKeo%2FQStJqCNTUd5xkFTW2nOA6ardE%2FzpkDFkQoEJEkelyJEIDjtGlj1nsa3T%2B\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a36182d85d1db518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":851,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2b37dbcc8359f2c3dd3fbced2e0d07eb","sha1":"ba9616204c7c25685d7d44178fee8db99d56df15","sha256":"8565d07863a4ee52d94b63db39908065ae759de714c5fa8c97ba488ffee392e1","sha512":"de41afbfefb8a098f78194ee90fbf7acfc181cb8def4117c28e2950f48d334d72449e5f0ecf2876498eed71b9071c4f3da556157f02c3c706e59c1df84746655","ssdeep":"","tlshash":"7fd02b9f90437387481215607ac125d2274d12f6a43a82e83d86d48753d867ece9b5dc","first_seen":"2026-08-17T03:53:47.531882Z","last_seen":"2026-09-05T01:38:23.184219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origin-protocol.org/IBMPlexMono-Medium.ttf","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://origin-protocol.org/","date":"2026-09-05T01:37:51.543Z","timestamp":1788572271543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET /IBMPlexMono-Medium.ttf HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://origin-protocol.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 13:02:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxLW%2Fg3CY2reAVsV4YhiCat6tM1HmTwfcTat1t22EJLthegCarV4ChdviO%2F2nxg1Ult8D2sxJiZSLF4MkguUTPtfAHAwzoPM38hVMlEHmLkj0QzEdPx36xz6EgtuEusZvtuERRnX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"20f2c-6558c4cc049e3\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36182d92d2cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134956,"size_decoded":58546,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"eddb5e5647bc7910fd2417321769f58d","sha1":"edf16d6f8afa5e378fa8db6307826f9799cf890f","sha256":"8ae925744d53758b67a77ea35c2fc46d7b688c7d8c04da3b579902bed0ca0e17","sha512":"0e505996dd33705bf86d2c6b4219cb13bbab2b2a69629b5e813d9ea52d6387f20217487586ea377f838c8d67d9ebb7a2a9f23e0af43d1db06916198768cfd983","ssdeep":"3072:DBQ83nHSIK/zcs/5/jQ0z5vQjVgqgfL8we3YVvcGspKw6:DO83Qdu0zgtwe3YVvczpH6","tlshash":"b4d3954bdffb6b17f70a5af44de1b27816b0f617ef34660a2c409901d6cb249062be94","first_seen":"2025-10-17T14:17:55.770348Z","last_seen":"2026-09-05T01:38:23.185224Z","times_seen":21,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origin-protocol.org/IBMPlexMono-Bold.ttf","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://origin-protocol.org/","date":"2026-09-05T01:37:51.544Z","timestamp":1788572271544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET /IBMPlexMono-Bold.ttf HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://origin-protocol.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 13:02:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5eLoeumYTHMc8DGnyxi2nEw%2Bj7DRw4Td5GNa%2FfnWYM3dZ1IvVM2OoSCd%2F8x4joRZHuLoPUIdZfhQBJM6npzLUn3e3TaH5jbw8HyAxHBsy0V%2BKkvCJWfAmPaKBXjLiTkStLDDvuW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"21348-6558c4cb04427\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36182d92d2db518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136008,"size_decoded":58431,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"9d4c2f370e8ffd92a0da7d67c6e9d40f","sha1":"ed7726a11318ec2c3179367471d556fa31050d38","sha256":"dbd2a2fb024579438d6400a84e57579bfd2dbe67c306c8fd9fde92a61e4f2eea","sha512":"8a0b580f57f4f433c6e110dd44de55f37be7a03392f04a8911f1feb12e1a0aa6b74eb5a44ff5a97624c04796eecb44f1d3ba0a5f928fda72503eff5900e15c85","ssdeep":"3072:tLJyUYNJ83Ve/hC4XmjQalonM4oge3YVvcGspYUI:t9qXY4XmLge3YVvczpVI","tlshash":"c6d3a34b9efb6f17f70a5af84de1b3b91670f617ef34620a6c409905c6cb249052be84","first_seen":"2026-01-20T11:55:21.472777Z","last_seen":"2026-09-05T01:38:23.185829Z","times_seen":10,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origin-protocol.org/IBMPlexMono-Regular.ttf","fqdn":"origin-protocol.org","domain":"origin-protocol.org","tld":"org"},"ip":{"addr":"172.67.169.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://origin-protocol.org/","date":"2026-09-05T01:37:51.546Z","timestamp":1788572271546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origin-protocol.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 22:32:22 GMT","end":"Wed, 14 Oct 2026 22:32:21 GMT"},"fingerprint":{"sha1":"25:92:08:D8:92:26:B5:23:B9:BD:63:25:0D:6F:D1:86:33:99:9C:3F","sha256":"45:AE:C6:E9:10:B1:05:9B:96:8C:6D:51:BC:33:43:BE:00:D0:60:CF:F9:67:ED:9C:BA:CA:9E:95:72:9B:FA:EE"}}},"request":{"raw":"GET /IBMPlexMono-Regular.ttf HTTP/1.1\r\nHost: origin-protocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://origin-protocol.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 01:37:51 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 13:02:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFJvTtHRIfE8T7vVT2y7TEudk1CMJhwYTxyoXYyTIN570ie4mjey3Zy9nOPeUSHA0U79Ot9z4kbO0d0Qs3Vvms9t4U9HELOd3hQ%2B%2BiK82EzsljB9YeaEWAypfn68ZY4uUHjpPp6W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"20aa4-6558c4cd66e17\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36182d92d2eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133796,"size_decoded":57136,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"b112f77f65b1766764ee122703ebdcd0","sha1":"d6acbd905047bf48a872010f366ff7476f7e59ad","sha256":"ab08018ccd276b79fb2c636bb95b9c543598f9d50505fe92506fcb4dae7810cd","sha512":"ca489511301b4d1796499c4bb0795206a2914d1a71f8292aed6494901458d0435df8459939b0e7633a310a21a2a2c64d7dfb41ffe60c8fa2dfe1426a02f29c29","ssdeep":"3072:cVpga1W+2SWuOVfMMQ+n31lDLrLuYd2z9i597JR:cn5l2lDLrKYd2z9i37JR","tlshash":"64d3944feffb6a17b70e0af48de5b2b916b0ba1bef3161091c51d501c68f249422bd94","first_seen":"2025-10-17T14:17:55.795017Z","last_seen":"2026-09-05T01:38:23.1864Z","times_seen":64,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"origin-protocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}