{"report_id":"6362ca87-0ec6-4fd1-8251-c375105f9679","version":6,"status":"done","tags":[],"date":"2025-08-14T22:32:11Z","url":{"schema":"https","addr":"propose-ondo.network","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"title":"Ondo Rewards Date"},"submit":{"url":{"schema":"https","addr":"propose-ondo.network","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-18T22:32:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"dao-ondo.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"propose-ondo.network","ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":3656324,"sent_data":5522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dao-ondo.finance","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-14T22:32:12.622971Z","last_seen":"2025-08-14T22:32:12.622971Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-13T15:26:13.000794Z","alert_count":0,"request_count":1,"received_data":761321,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipwho.org","ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-07-11T11:18:46.569057Z","last_seen":"2025-08-13T13:06:08.210473Z","alert_count":0,"request_count":1,"received_data":405,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"propose-ondo.network/modals.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-27T10:14:24.496223Z","times_seen":746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/fpbundle.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-27T10:14:24.525948Z","times_seen":744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-28T12:21:58.280386Z","times_seen":3722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/bundle.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-27T10:14:24.554673Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"42107d588f1df869e4b9632f849f8fda","sha1":"a9ad38ec95863b313979169f26744e24774e3821","sha256":"73997d2167c132242c88473cc8d75a94ba2dcb72ca9e221fa9eeabe6cc5ef72e","sha512":"ce7ad9781bad82bd8847a1ea0d28c94f00b0d1ed33bae1113447c1a4508a0813439804176030299043d85a614189377945db72ebb753b90f96d31ca03b099c1b","ssdeep":"","tlshash":"60f05228b5e45abb0fb32225c60b6280fa51005bc00be9013d9ec5c70fdd6451c39fcb","size":533,"data":"","first_seen":"2025-08-14T22:32:19.014329Z","last_seen":"2025-08-17T01:51:59.900616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/main.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"564d50449935715c86e596bec03a0004","sha1":"03614098abf8d4abaf8af253e5a7577f8389877e","sha256":"e0f5b2aed8ada8ebc431a4e42a6e1452dc334428cedc13c1bebc88e2a2cfe9ce","sha512":"1acb2cf7e916fd6b80c15d78679b4d56ebf480fe8136b18bdd2e539fc75f737e1a84b15a7a80ff6158862004dc9887ce4c898bd1645a304a6add343481c37854","ssdeep":"1536:+RVeDRCLOqwpo8ZWag9hdlxS5eMrl/Qf+9FN0XL9P9KAHH:+RVeDON5aod2trl/JeXKi","tlshash":"103451484885aa7ccb3af74d97f37936dbc10ce9cb5460149497e1c7e0aa3e1a2f194b","size":237255,"data":"","first_seen":"2025-08-13T13:06:13.215043Z","last_seen":"2025-08-17T10:59:39.229106Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"Function","is_inline":false,"md5":"2f0b46fb3332a45cc5b68b9cf7ae4edf","sha1":"704ecab7383b4444d0aef7ce83489be8ad84e20f","sha256":"79d0dcd00e4c0e1305428a9497d3a5664f64d566dfe761293e985d6e7e39f2ba","sha512":"466d1629b592058e0b4c3e5407f1ff54584a6a2392fbbcdc0d22c0c7c91d5ceb13ec12a9fd19533b2b29bec17a918fc9de9d6f2b36bd4019a9b50a839797a5a3","ssdeep":"1536:Xbfeq97Q9FlDZY81iwKnJz7uv6CZn/QZ0vntebLvLaCHm:Xbfeq7+PmBwggbZn/BILaV","tlshash":"b434404848856a7dcb7bf38d97e37132dbc10ceacb5464149497e2c7e0aa3d1a2f194b","size":233580,"data":"","first_seen":"2025-08-13T13:06:13.239012Z","last_seen":"2025-08-17T10:59:39.237436Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"be69a261c6c5e56e5c460b693a87a458","sha1":"24aa219e0ab488d29b83e34a0fe9e306e4d9ec5d","sha256":"36025f550204865b627545b57678b39f16653110dc7f9a06448c17bcace52199","sha512":"0edc66ddc4c80ed591e4a03896b5cec1f29a0fadbdfe513349abdd1317e1819f35a2269b486d45f037829f9866900a2b46cec8cb1f96efc4b8a3055ba5ba7d60","ssdeep":"","tlshash":"96216e3ba7000337ccdba9f4ced5b8c42f2119b2a20958203c5ce502e85ce64c73add9","size":1268,"data":"","first_seen":"2023-03-07T13:52:42Z","last_seen":"2026-07-22T23:47:10.620808Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"propose-ondo.network/index_files/81f6254e7faa0608.css","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /index_files/81f6254e7faa0608.css HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/css\r\nContent-Length: 1407\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:31:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1359)","md5":"6c0f2f45dc18f15defbf2681658d9f58","sha1":"5e6eb73b4fcc827ab9408dcb2b46200629ff32b1","sha256":"c65e42fcae72c9b6e979bc4c9ab310d2e85187e5cc3f62e3888ef1eb9411984b","sha512":"be93b0967486d40d647df6d04753664573ca8ce95a5933fcac7e9a5d2db62664e809fc0893f6c46761076fb8f07ff1d58545d2287195153c7e2f00487c93be36","ssdeep":"","tlshash":"222191165d1a504480b38d4139dfbf2a3c1b743a15550992e11e8c2a9ffbaa7a3d1f39","first_seen":"2025-08-14T22:32:18.98693Z","last_seen":"2026-03-12T15:55:51.416615Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/ondo_finance.png","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /ondo_finance.png HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 54702\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:38:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 680 x 350, 8-bit/color RGBA, non-interlaced","md5":"f2aa4db9155090d4af1b701bbbf15fc0","sha1":"f2ac22e01489626390f43b4edad5497ac4466a89","sha256":"22f89cbe52f0379954152759987b51b2df75547470fe9e49731198541af74230","sha512":"fd4683399e17d5b75e231ef65b4aeab040a173d3a2c47159f142debc88245ee5f768a6f963ff0d6018dbeb0f2d883efc429c0c2515ba10ef14de888a81eae48f","ssdeep":"1536:Ysc29eMx9S1nZySNmMYgyKEMZr5gmEr8Kn8su5g0K:lcgH4uSNMAX8ms83suVK","tlshash":"1733f19cb4457aadcc2fb2b2dfa01ccb440d22bbf830056d518f91a4c7f068db985b98","first_seen":"2025-08-14T22:32:18.990952Z","last_seen":"2026-03-12T15:55:51.413661Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/index_files/font-2.woff2","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /index_files/font-2.woff2 HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/index_files/81f6254e7faa0608.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 32756\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:38:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32756, version 0.0","md5":"443a3ffed71282c8da64bbfc3b2cb5bb","sha1":"a1fec76b9367ac57a95b469708a7c72d98ab93a8","sha256":"b0abb02540b52a90f4411121f10ca3133349d5191e0169ef613861f6cf73ca74","sha512":"7717a0bb9af7e567708a115e9bdc2f165d13f39feee7019d8cb37238744a16d58900e29478cbe212685acd06a1b021810cc62e4700c968781db2490ceb5f0d66","ssdeep":"768:KgT7FqkUdvBYr93tnHlcP6A15VDMXKD3B9iX9Og:Vxqk/9dnH6pB3BUNOg","tlshash":"73e2f1417f4ba76d9c044b89c2ce3fcf78d4245de0982aecec1951fbe8904259a299f8","first_seen":"2025-03-16T13:23:15.899948Z","last_seen":"2026-06-28T16:01:02.526787Z","times_seen":33,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/index_files/font-1.woff2","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /index_files/font-1.woff2 HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/index_files/81f6254e7faa0608.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 31252\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:38:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31252,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 31252, version 0.0","md5":"0de92828400f8bb3a78a9749ddf6c34d","sha1":"126cbb40964f763bb43a818496ad95a5720732bf","sha256":"48e5d6fb00cc99ee217d445b55dbab18ef14cbbc3a7bc7c8f65c88f0472563c4","sha512":"9008d6766b23a6497357dc91328fa0106869c50a5e199ca0617d250d3eefa8d68b40d7d275909de8bd1ed03c408903f8b4f72acf4492b8600dc85c58cd51937b","ssdeep":"768:zvScMyEN/PYEFX+kCBQy4+320Cms7/U3qRz9nO8TZ8D:bS5C4+k8Qb+G0Cms7/ZRZnOdD","tlshash":"53e2f1768c88e7f0ea3c5a5a4dc39d04a4d542c57f3b6f892807179fc8da7877188b52","first_seen":"2025-02-11T04:58:36.431905Z","last_seen":"2026-06-28T16:01:02.526228Z","times_seen":36,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":44,"dns":1,"connect":20,"send":0,"wait":33,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/flux_finance.png","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /flux_finance.png HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 67044\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:38:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 680 x 350, 8-bit/color RGBA, non-interlaced","md5":"9249a8e2f441b24f0c11bbdb5c391e50","sha1":"a14095b0ecddc3255d4231f5147f490ef2d26e81","sha256":"9d40926b3028f179a3a573fcc76b34f6d37a28e208086fba8e66bbcdcb1e03c2","sha512":"af431ae042e9fba3c0d279fd23c7c90d5371740b5a29d52b9ce86b78da6414c9659f28068ecd483e5bc47b579d5a16b9a21eed1cc35f439d67885c7eba3be269","ssdeep":"1536:f6HueT1iu0H5oonOqzs7WONWXZhvOmJYwKUZJN/aAYKRFj:f6tsu0HSonOqWIZDPHpr","tlshash":"c863024d5a936b5b4a1bb27c975f2c588f624fc7dbdc5508a844f58288c4db3e7a0818","first_seen":"2025-08-14T22:32:18.998765Z","last_seen":"2026-03-12T15:55:51.417185Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dao-ondo.finance/favicon.ico","fqdn":"dao-ondo.finance","domain":"dao-ondo.finance","tld":"finance"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.839Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dao-ondo.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"dao-ondo.finance","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/modals.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 52833\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:22:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-27T10:14:24.496223Z","times_seen":746,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 22:31:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 155070\r\ncf-ray: 96f3e78c6b33b4ee-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-lga21927-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3506090\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FcAdPrxfoTy0%2FiJv%2F%2FWanIIcaPYcfDZ9FBiULI30u7DErsF2pcKJqVFNehtk7jXl2bs1r2K3xtALblcRJJnEwIbjh6ankQR588JuNOckSLPuHqkPs5DHLERrUQV%2BS0sSMRA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-28T12:21:58.280386Z","times_seen":3722,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":16,"receive":5,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/bundle.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2510372\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:22:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-27T10:14:24.531169Z","times_seen":674,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipwho.org/me","fqdn":"api.ipwho.org","domain":"ipwho.org","tld":"org"},"ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:48.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 16:08:31 GMT","end":"Tue, 14 Oct 2025 16:08:30 GMT"},"fingerprint":{"sha1":"87:88:D2:F8:B6:23:06:38:98:C4:B0:E2:06:68:C4:E3:63:EA:AB:2B","sha256":"21:76:B6:9A:29:3A:7D:88:85:23:77:5F:33:A5:A8:D9:7F:63:79:69:AD:62:6A:CC:8F:63:72:1D:81:74:45:82"}}},"request":{"raw":"GET /me HTTP/1.1\r\nHost: api.ipwho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://propose-ondo.network/\r\nOrigin: https://propose-ondo.network\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 14 Aug 2025 22:31:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-28T16:52:06.002395Z","times_seen":544387,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":340,"dns":42,"connect":142,"send":0,"wait":145,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-14T22:31:47.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 588234\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:39:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":588234,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28100)","md5":"6031f3b49b4bbab2fcf4462d10d9e452","sha1":"80bf8173d100820f7e497175c684b2f21fdfb1b1","sha256":"60a24706223669690b31b8b4ca0ac6c2c479238e530bd0fe7077145cfaee53c1","sha512":"fbff4762d03e726fbe9f02501fe7dce76570dbb470f277d60da4985db20f59a8f8522a519adb8946052d362f58c6ff72a5697d6d92ac051b645b1d36a314d0ba","ssdeep":"6144:MYjJqEp2istWxYFPCk/ZGCeZzbNuNya/bCnGZhVONSdgB:MYjJqEp2istWxYFCk/UCexUNF/XmB","tlshash":"eec43ae7636423a0710783ed157f723a603618fef9528abca6d10e41dac63dd2c65ac6","first_seen":"2025-08-14T22:32:19.006643Z","last_seen":"2025-08-17T01:51:59.896188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":78,"dns":28,"connect":25,"send":0,"wait":39,"receive":88,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/main.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 237255\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:22:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237255,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"564d50449935715c86e596bec03a0004","sha1":"03614098abf8d4abaf8af253e5a7577f8389877e","sha256":"e0f5b2aed8ada8ebc431a4e42a6e1452dc334428cedc13c1bebc88e2a2cfe9ce","sha512":"1acb2cf7e916fd6b80c15d78679b4d56ebf480fe8136b18bdd2e539fc75f737e1a84b15a7a80ff6158862004dc9887ce4c898bd1645a304a6add343481c37854","ssdeep":"1536:+RVeDRCLOqwpo8ZWag9hdlxS5eMrl/Qf+9FN0XL9P9KAHH:+RVeDON5aod2trl/JeXKi","tlshash":"103451484885aa7ccb3af74d97f37936dbc10ce9cb5460149497e1c7e0aa3e1a2f194b","first_seen":"2025-08-13T13:06:13.215043Z","last_seen":"2025-08-17T10:59:39.229106Z","times_seen":10,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/index_files/font-3.woff2","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /index_files/font-3.woff2 HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/index_files/81f6254e7faa0608.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 32404\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 Aug 2024 15:38:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32404, version 0.0","md5":"7a44fd1fb852fc04adba59d2f4a920ec","sha1":"bdaaee5a0067a27d7b336f31cfd1c8d57523aa66","sha256":"088b11af517f16c06ebe96ae0413032aad5eb5329be39e6a33a6f5bca9b49fab","sha512":"2faa7f347860e88e2daa0dc32e822fd8f6584766f32b5fffd3ac9280574fb3baee9d1a5fa21322e014ec59ba0619653bbe531cee8ddfb004080a5d69776b5d25","ssdeep":"768:8OWx/nkz3KmwouwDMD3QJummpLM1EXz5znzOJljG2:8Nx8jKtobMD3Q5DKpnzObJ","tlshash":"6ae2f124c55d5835f426eeca988f4863c46747cb34bb8c6a8ed2355ccc5c39fa837588","first_seen":"2025-03-16T13:23:15.732097Z","last_seen":"2026-03-12T15:55:51.412029Z","times_seen":11,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":37,"dns":1,"connect":17,"send":0,"wait":36,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/fpbundle.js","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:47.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://propose-ondo.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:47 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 45503\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:22:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-27T10:14:24.525948Z","times_seen":744,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propose-ondo.network/","fqdn":"propose-ondo.network","domain":"propose-ondo.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://propose-ondo.network/","date":"2025-08-14T22:31:48.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.propose-ondo.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 01:25:06 GMT","end":"Sun, 09 Nov 2025 01:25:05 GMT"},"fingerprint":{"sha1":"CD:26:B7:4F:6C:BB:F8:FD:C2:D9:FD:84:C7:84:0B:BC:71:21:AE:FA","sha256":"9D:30:B8:5F:A8:64:6B:0B:8B:A2:CC:69:02:19:B1:D9:0E:6A:67:25:6D:88:E3:6B:A8:3D:5F:E1:B4:D7:9B:57"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: propose-ondo.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://propose-ondo.network/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 14 Aug 2025 22:31:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 588234\r\nConnection: keep-alive\r\nLast-Modified: Thu, 31 Jul 2025 22:39:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}