{"report_id":"4e463321-469c-46c5-b74d-c380906fb2b8","version":6,"status":"done","tags":[],"date":"2026-02-14T09:01:30Z","url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"title":"Ondo Finance","dom":{"size":106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"92deba240c6a18bd1aa0e023e49558fd","sha1":"15084d69a3ccd400f5fad59ea601a8a46ebca86d","sha256":"f91fa940cab67f2670242553c6f7b782d56f29353fd5ba8e08562670ae2171bf","sha512":"737194a3ac9e46ebab5d796140a0e4301125f8f5f36ac258f48e5363ac2aa43f1088612fa908275a35a35ccfcf2b70e8a7a33489feff51f7940e5fdff477bf13","ssdeep":"","tlshash":"4ab012dc90b11109782137dc38c092210c91d0420336ae0035ee3e39e3096274c031d8","dom_hash":"domhash7c9d2225242a8c2b28f5eccc1a29ce41","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:01:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ondo-vote.xyz","ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-25","domain_rank":0,"first_seen":"2026-02-13T12:48:29.651262Z","last_seen":"2026-02-13T12:48:29.651262Z","alert_count":0,"request_count":9,"received_data":38084417,"sent_data":4151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ondo-vote.xyz/chunk.23.sxy3vlsy.js","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"410b7402f7b3a879aa8ba71667a46303","sha1":"61a53171da93353876129ac13f559053f091ca03","sha256":"061ec4d41998ca5615bda7bce2537b551d628d32394839094a14d03c2ae7e1d1","sha512":"d77d8c00699baa6136fc6ee9c457cf70e555bfa73914079f0f0efad790e7ddaee1867a2b526785f753c54faa3cf0231e55ef4644e9f576cbefe3ad09bce336ca","ssdeep":"768:ICdL7c7xVk3CmTkuOMQt0pv5bc9pcLskcYcVcqNP+9XvmMcC7c0VfcJ5:Yk3cuO85J6+9O5","tlshash":"4563b4d96a1ad4d59e1220dde433f915e0281e23cdacf263a67cdec0b81df26844767b","size":68937,"data":"","first_seen":"2025-12-28T19:00:56.474008Z","last_seen":"2026-03-20T09:46:05.124742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-18T13:07:18.148925Z","times_seen":3607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:01:03.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:01:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAo%2F%2BoHcKjZCrk5MEvYEzs%2FGepizK2YkQ9HtR4y%2FSHW71n1uV7s53DqXWNty04B9%2ByijnVH3ts1zGZHhmIewO2Ek%2F4NTHS7hf2K60P4%3D\"}]}\r\nage: 72786\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdb60f0ce9296b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9501608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (16280)","md5":"fe9ad38904bca6120fd1427f2fd2faee","sha1":"c08b2c4d8ead059dc6b7d6761f2df51e8231ed3c","sha256":"96ac1262ea59523d7a304f59fd241c17a6c0bd5561a3b80c4ac2e5a0392ad944","sha512":"53f09a4860ab12980032d96fea8d0dd9e2f4ff877d9fdf20222769d6c52f6588130ee9915606df142e5f96e4c45b9807015563d1d0e54f5457e51ac4c9b3ac66","ssdeep":"24576:gLgX1zDmZpISAEsyCe7zo6qEzs7SRXUP8:gLaJSAEZCe7zoeyP8","tlshash":"7625bf3b271076297523d91c91ba628dda20fc07f2479afd99e30e04c6de3d21e6729d","first_seen":"2026-02-13T12:48:33.493773Z","last_seen":"2026-02-14T09:01:33.515994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":239,"dns":209,"connect":8,"send":0,"wait":54,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/favicon.ico","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:04.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondo-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:04 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 72786\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D36OkVcoVLAmIiyr2DZU%2Bhm9WWoP0uow2JED454cXTVcmp37dgIvs%2F3evtkxxDQMKqHTJqjwAKMpmazqZqNkT%2F6CcjPbsImnOH28XGk%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cdb60f68b24b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9501608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (16280)","md5":"fe9ad38904bca6120fd1427f2fd2faee","sha1":"c08b2c4d8ead059dc6b7d6761f2df51e8231ed3c","sha256":"96ac1262ea59523d7a304f59fd241c17a6c0bd5561a3b80c4ac2e5a0392ad944","sha512":"53f09a4860ab12980032d96fea8d0dd9e2f4ff877d9fdf20222769d6c52f6588130ee9915606df142e5f96e4c45b9807015563d1d0e54f5457e51ac4c9b3ac66","ssdeep":"24576:gLgX1zDmZpISAEsyCe7zo6qEzs7SRXUP8:gLaJSAEZCe7zoeyP8","tlshash":"7625bf3b271076297523d91c91ba628dda20fc07f2479afd99e30e04c6de3d21e6729d","first_seen":"2026-02-13T12:48:33.493773Z","last_seen":"2026-02-14T09:01:33.515994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:05.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondo-vote.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:05 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 72788\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrVPllpMdocuWLr7aPkQ2SelCgD%2Fz6K2C%2BNZ2OjsNPoard9rVjpHHOjk9QMhcGYPzbJB8JNLwGacsH5DSYSyu8x6x355WCNqTI%2B0rUU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb60fbec27b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9501608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (16280)","md5":"fe9ad38904bca6120fd1427f2fd2faee","sha1":"c08b2c4d8ead059dc6b7d6761f2df51e8231ed3c","sha256":"96ac1262ea59523d7a304f59fd241c17a6c0bd5561a3b80c4ac2e5a0392ad944","sha512":"53f09a4860ab12980032d96fea8d0dd9e2f4ff877d9fdf20222769d6c52f6588130ee9915606df142e5f96e4c45b9807015563d1d0e54f5457e51ac4c9b3ac66","ssdeep":"24576:gLgX1zDmZpISAEsyCe7zo6qEzs7SRXUP8:gLaJSAEZCe7zoeyP8","tlshash":"7625bf3b271076297523d91c91ba628dda20fc07f2479afd99e30e04c6de3d21e6729d","first_seen":"2026-02-13T12:48:33.493773Z","last_seen":"2026-02-14T09:01:33.515994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:05.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondo-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:05 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 72788\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKU5j%2Fn1%2BVvlkhpfvtEJW3mC4oc3OqoBEepvQR4nDv5Z7E1yVvskE0RVgn%2FfhhjQf8%2FFIO%2FL45PxSif1Hh9jUdFj4XTZ4I99ZlAb2nI%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb60fbfc2db09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:05.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondo-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:05 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 72788\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKlncajvazUcMNRTILUUSgpnmGcUFvM9psI5qjjnvaXW4WBzWGZ54TZOlhrPpp3T%2BBkRs7DHv4lb7p9XFO8eDyGsvfFK%2FwbanJoqVYY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb60fbfc31b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9501608,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (16280)","md5":"fe9ad38904bca6120fd1427f2fd2faee","sha1":"c08b2c4d8ead059dc6b7d6761f2df51e8231ed3c","sha256":"96ac1262ea59523d7a304f59fd241c17a6c0bd5561a3b80c4ac2e5a0392ad944","sha512":"53f09a4860ab12980032d96fea8d0dd9e2f4ff877d9fdf20222769d6c52f6588130ee9915606df142e5f96e4c45b9807015563d1d0e54f5457e51ac4c9b3ac66","ssdeep":"24576:gLgX1zDmZpISAEsyCe7zo6qEzs7SRXUP8:gLaJSAEZCe7zoeyP8","tlshash":"7625bf3b271076297523d91c91ba628dda20fc07f2479afd99e30e04c6de3d21e6729d","first_seen":"2026-02-13T12:48:33.493773Z","last_seen":"2026-02-14T09:01:33.515994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/chunk.23.sxy3vlsy.js","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:03.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"GET /chunk.23.sxy3vlsy.js HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondo-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:03 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 11:25:50 GMT\r\netag: W/\"694d1f3e-10d49\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 72786\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPp2bm%2FiQPBHuVu3you1y8iPbATWa982NscaOWETS8mqOPkzRxxlfZrMOyEk%2BypGoYtCc4U09GF9OHxLAZwzv8g2DPTYOTHRYBAYrlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb60f27a63b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68937,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"410b7402f7b3a879aa8ba71667a46303","sha1":"61a53171da93353876129ac13f559053f091ca03","sha256":"061ec4d41998ca5615bda7bce2537b551d628d32394839094a14d03c2ae7e1d1","sha512":"d77d8c00699baa6136fc6ee9c457cf70e555bfa73914079f0f0efad790e7ddaee1867a2b526785f753c54faa3cf0231e55ef4644e9f576cbefe3ad09bce336ca","ssdeep":"768:ICdL7c7xVk3CmTkuOMQt0pv5bc9pcLskcYcVcqNP+9XvmMcC7c0VfcJ5:Yk3cuO85J6+9O5","tlshash":"4563b4d96a1ad4d59e1220dde433f915e0281e23cdacf263a67cdec0b81df26844767b","first_seen":"2025-12-28T19:00:56.474008Z","last_seen":"2026-03-20T09:46:05.124742Z","times_seen":4,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/secureproxy?e=jscdn/getFile","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:08.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondo-vote.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ondo-vote.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"grsxx0rfcrz1spuc66op\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers, accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMe%2BUq9jRiTiCmzCHlXhZ%2FNkj87Pb%2FV1slxUrIuWL9lICewTXjviyig5TlL9HQJ5P33A04R5Dc71NX0hdrI4zKhMFQhTNAwz0qxxL%2BYyTCU1GA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb611258c0b09c-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f2dcc314f77c834f8a1dc091e77a698","sha1":"02ddc9e3c5026f1aeafa9098cb1ee9420a53e0f6","sha256":"ce58bf87319ddd62d94026ba708b11b1acdae99d417ad71e78385c5c48baeffd","sha512":"e5ffa46481a71e28bd2f56255d4e66e025bdc281820203e1f2e2cf92c43df8d5bab7824acf0942b788c184e7fcba92bed561ce9c6b96a30c508c89a6a6665437","ssdeep":"","tlshash":"3980000e0282020f0022a8b08ae82c300a8a038008228e280008a0080e2b0828c000cc","first_seen":"2025-12-12T04:00:11.329317Z","last_seen":"2026-06-27T10:14:25.971626Z","times_seen":46,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz/secureproxy.php?e=jscdn/getFile","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:09.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondo-vote.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ondo-vote.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"grsxx0rfcrz1spuc66op\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9ZyPWVWTOd6RY5AiI2A%2Bo8Y2UQ8A87cRGySTIvVz5V9lzYeiBcb90uJ88L%2Bfcw%2FBWkpeiJRq%2Bm44mXFtUcB29Cd2puSdjXeglaeGCo%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9cdb6113c913b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-06-28T17:04:49.020897Z","times_seen":43,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondo-vote.xyz//secureproxy.php?e=jscdn/getFile","fqdn":"ondo-vote.xyz","domain":"ondo-vote.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondo-vote.xyz/","date":"2026-02-14T09:01:09.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondo-vote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:02:49 GMT","end":"Wed, 25 Mar 2026 12:01:41 GMT"},"fingerprint":{"sha1":"31:EB:04:74:DC:86:E4:7D:72:20:F3:87:3B:5E:EE:66:EB:9A:AB:35","sha256":"76:A9:C7:97:6A:AD:DC:C6:62:82:14:28:F5:74:F3:57:4D:E7:2B:36:FB:FD:15:3F:42:0E:AF:72:A8:0D:72:10"}}},"request":{"raw":"POST //secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: ondo-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondo-vote.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ondo-vote.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"grsxx0rfcrz1spuc66op\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:01:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giV85yW7C4YtetLtkgn68Fq8LHIiNhPl7iwRveT66a77OL90gMTEQhF7ZCPnK6iNONGgrH%2BnpxsyJ7Dg6jYSpbuLJ4R16PvnPPBLad4%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9cdb61143925b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-06-28T17:04:49.020897Z","times_seen":43,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}