{"report_id":"7c6b0f86-2a0e-4e34-988f-ac329e38a78e","version":0,"status":"done","tags":[],"date":"2026-06-22T19:50:38Z","url":{"schema":"http","addr":"participate-ondo.xyz","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"participate-ondo.xyz/","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"title":"Ondo Global Markets — Governance Portal","dom":{"size":19621,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6641)","md5":"3b67c117ecde922f45611b69435aeb27","sha1":"43befb18294d4bc4a9013c1319c989667227d618","sha256":"edefccf56c4fcdfa36abbfc22e6f50f1cb51aecded6c2216e7bf21c7c2628391","sha512":"47b2a437a6a6a660b6e885e051ce9ebeb02cc3e0b2e1e97a31d65f3d99e6c9e1fa0a4e16ac85cdb4a595a5760243c3449639107cd2550f393a47a4ff835f63df","ssdeep":"384:vwIc/tpzDjiMtQ61asfp6b5R9uL2gAsuwmc/tpzDjiMtQ61asfp6b5imB:4IcLzDj7fwv9ui2DmcLzDj7fwomB","tlshash":"c692b7856ff012f860c2e7f1d56a95be7f825973b900e258b36c0d17cf6689c8d1289b","dom_hash":"domhash9e4d1a97a61dad9c356e8951efc9aef0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"participate-ondo.xyz","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T19:50:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"participate-ondo.xyz","ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-06-22T19:50:13.777097Z","last_seen":"2026-06-22T19:50:13.777097Z","alert_count":0,"request_count":6,"received_data":112818,"sent_data":3014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"participate-ondo.xyz/wave.js","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2076e675f9aa9943c80e970e6087734","sha1":"89c46c62dbf0111a788a6fddd7abfa238488f338","sha256":"145a728f5fdfdf71bab0c662596f2830c10596556b2eff12ad28146684434ce3","sha512":"fa2ba1e3a2b740dd87e6d6a6564460e7c675b2b768cadeb00375b26e4d64ffb2961fc19be0a116438a8b76e23bbca0e4ba2dcc9198e0ba6ca16cb939e224255f","ssdeep":"","tlshash":"6441bd4eeeb31a1961a3602e475fa088e9c0c2131e17ed1ff81df31c4f6c05296aada5","size":2417,"data":"","first_seen":"2026-06-13T04:44:24.838527Z","last_seen":"2026-06-22T19:50:39.416739Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"participate-ondo.xyz/","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T19:50:13.967Z","timestamp":1782157813967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 32\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rhjv%2B%2BmPcfMHr88gB3cL3CgK76M4ri%2FT7u9%2FcUdPSsagOsCKjHfYqpGAcZqlqWipMlGWqgIaN4UXAxASdNa%2Fv%2BpnHA%2F%2F7M6cjjytFcAyKy2M1hGz2IMS6Ob3FDo1JjoKYpbdDIKF3w%3D%3D\"}]}\r\ncf-ray: a0fdc7e17cae75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19692,"size_decoded":5704,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6585)","md5":"c358edfb994e323d4a8e02908b50ae89","sha1":"6063c199ec68478ef1bb0b3fa054c0809514f61f","sha256":"81b6c83d0216ac73934165d2d2172075369f36deedc4deef54ee318d880da70d","sha512":"25e709ca2c9f5f3166a7e7d354085b0a48440310f4340e17d4a4d10d0725b98d5a49507122f6d7ff3e0fc967e82ecdc36411f562bd5f0c7bf59e05df34452eb3","ssdeep":"384:JwGc/tpzDjiMtQ61asfp6b5ou/L2gAh0wmc/tpzDjiMtQ61asfp6b50mYu:eGcLzDj7fwWu/i7lmcLzDj7fwGm7","tlshash":"5692b7856ff012f860c2e7f1d56a95bd7b820973b900e258b76c1d17cfa689c8d12c9b","first_seen":"2026-06-13T04:44:24.836548Z","last_seen":"2026-06-22T19:50:39.41541Z","times_seen":10,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"participate-ondo.xyz/style.css","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://participate-ondo.xyz/","date":"2026-06-22T19:50:14.275Z","timestamp":1782157814275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://participate-ondo.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\netag: W/\"6a3950cb-4180\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 32\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xJUSQfA4o5U9A1iq7DZ57oFOAzrsODxVqAA2owKrUv87sqsSNX9xLIUTgNoYey5HNgm%2F264XnZUUQTrPfXOdGfJSawiP1Yw9CFxQRf9TI%2BQXc4nJ%2FZcfru3pDFHKOWtNH48jtT1AXQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a0fdc7e33ce675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16768,"size_decoded":4739,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2e8753e6ad13ea60576162dbd097d55f","sha1":"8cd4a72ec18a0792be9da4524c14ba83593d2e42","sha256":"301ac2d549897fe8efed50a9d2b66f8c17793b715016a6f121245df455f98cd1","sha512":"0a46a92f5b086155d39dfd621232a39229875a84a6dddb79c3c9f314a6d13f45b31fa6680883e70bdfc43347de5730f3db7d59b15c728280ec3f623659e279cf","ssdeep":"192:iJYOzFoi9m9Kv9mz5yG2Qhkp+WIYW20K9mt9mcaMDn5u8HqngzMhpcC9mn9YeHu2:KcKSEPc88YeH9YPJe","tlshash":"cf724068d7566046b23b9eb877f25706e76880234606427d7be872488ff90a8d371fcd","first_seen":"2026-06-13T04:44:24.837445Z","last_seen":"2026-06-22T19:50:39.416079Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"participate-ondo.xyz/wave.js","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://participate-ondo.xyz/","date":"2026-06-22T19:50:14.277Z","timestamp":1782157814277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET /wave.js HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://participate-ondo.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\netag: W/\"6a3950cb-971\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 32\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7Fwi8OCvUlH0%2FbhG5aZ1b8U3LPIe6%2F5nWGOq4%2BBJzX4D2EXqz1l5gHrPx3GOsPgWnOooOqaLCCiAv7YOlyIZ3izJCEeqhidBEXJ1w5h5HIW9FiQHn0k3oCQ6Br0kr4Ed7lEVEGwZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0fdc7e33ce775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2417,"size_decoded":1909,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f2076e675f9aa9943c80e970e6087734","sha1":"89c46c62dbf0111a788a6fddd7abfa238488f338","sha256":"145a728f5fdfdf71bab0c662596f2830c10596556b2eff12ad28146684434ce3","sha512":"fa2ba1e3a2b740dd87e6d6a6564460e7c675b2b768cadeb00375b26e4d64ffb2961fc19be0a116438a8b76e23bbca0e4ba2dcc9198e0ba6ca16cb939e224255f","ssdeep":"","tlshash":"6441bd4eeeb31a1961a3602e475fa088e9c0c2131e17ed1ff81df31c4f6c05296aada5","first_seen":"2026-06-13T04:44:24.838527Z","last_seen":"2026-06-22T19:50:39.416739Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"participate-ondo.xyz/fonts/font_126cbb40964f763bb43a818496ad95a5720732bf.woff2","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://participate-ondo.xyz/","date":"2026-06-22T19:50:14.324Z","timestamp":1782157814324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET /fonts/font_126cbb40964f763bb43a818496ad95a5720732bf.woff2 HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://participate-ondo.xyz/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aqrVbIMJ9lSgO4tMIbiAUwzEGQN7J503udoaEkMBIkkGHw04pMvaY8TfzHix7D9oGhYqFGXwdYSC3%2FOg4rWvh0EYvA47223MUMMzm36pK0qTU3SlQ9xqLHtRN%2FarL%2FbkyG2Jkhubw%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\netag: \"6a3950cb-7a14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 31252\r\ncf-ray: a0fdc7e38cef75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31252,"size_decoded":32199,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 31252, version 0.0","md5":"0de92828400f8bb3a78a9749ddf6c34d","sha1":"126cbb40964f763bb43a818496ad95a5720732bf","sha256":"48e5d6fb00cc99ee217d445b55dbab18ef14cbbc3a7bc7c8f65c88f0472563c4","sha512":"9008d6766b23a6497357dc91328fa0106869c50a5e199ca0617d250d3eefa8d68b40d7d275909de8bd1ed03c408903f8b4f72acf4492b8600dc85c58cd51937b","ssdeep":"768:zvScMyEN/PYEFX+kCBQy4+320Cms7/U3qRz9nO8TZ8D:bS5C4+k8Qb+G0Cms7/ZRZnOdD","tlshash":"53e2f1768c88e7f0ea3c5a5a4dc39d04a4d542c57f3b6f892807179fc8da7877188b52","first_seen":"2025-02-11T04:58:36.431905Z","last_seen":"2026-06-22T19:50:39.417245Z","times_seen":29,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"participate-ondo.xyz/fonts/font_a1fec76b9367ac57a95b469708a7c72d98ab93a8.woff2","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://participate-ondo.xyz/","date":"2026-06-22T19:50:14.325Z","timestamp":1782157814325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET /fonts/font_a1fec76b9367ac57a95b469708a7c72d98ab93a8.woff2 HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://participate-ondo.xyz/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U81LLA8X7BJpcxXJiRaj6kuEU%2FIQNI7xWNWtLjjetedLyaaODXh7kYcWS0kd6UYvTWVWW4bRMUuAok1J7oHzyaC7HQYNeIMXA%2FNHnvvqjJJ4ZJn0iyziF3QwkpX5Jv5EtUE43y30RA%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\netag: \"6a3950cb-7ff4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 32756\r\ncf-ray: a0fdc7e38cf075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32756,"size_decoded":33701,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 32756, version 0.0","md5":"443a3ffed71282c8da64bbfc3b2cb5bb","sha1":"a1fec76b9367ac57a95b469708a7c72d98ab93a8","sha256":"b0abb02540b52a90f4411121f10ca3133349d5191e0169ef613861f6cf73ca74","sha512":"7717a0bb9af7e567708a115e9bdc2f165d13f39feee7019d8cb37238744a16d58900e29478cbe212685acd06a1b021810cc62e4700c968781db2490ceb5f0d66","ssdeep":"768:KgT7FqkUdvBYr93tnHlcP6A15VDMXKD3B9iX9Og:Vxqk/9dnH6pB3BUNOg","tlshash":"73e2f1417f4ba76d9c044b89c2ce3fcf78d4245de0982aecec1951fbe8904259a299f8","first_seen":"2025-03-16T13:23:15.899948Z","last_seen":"2026-06-22T19:50:39.417846Z","times_seen":26,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"participate-ondo.xyz/images/image_886403c1ce60ebffff60780e7fcc15019f7f301a.ico","fqdn":"participate-ondo.xyz","domain":"participate-ondo.xyz","tld":"xyz"},"ip":{"addr":"172.67.196.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://participate-ondo.xyz/","date":"2026-06-22T19:50:14.363Z","timestamp":1782157814363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"participate-ondo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 14:47:51 GMT","end":"Sun, 20 Sep 2026 15:42:43 GMT"},"fingerprint":{"sha1":"57:E7:B8:E3:52:F3:71:33:04:DF:D4:FB:64:BF:26:6B:F2:D9:59:8E","sha256":"C2:14:ED:C0:02:07:70:C1:2F:66:81:BD:FD:53:E4:89:A0:C8:A1:CC:01:BB:46:1C:DD:D6:E8:3C:19:1C:16:B1"}}},"request":{"raw":"GET /images/image_886403c1ce60ebffff60780e7fcc15019f7f301a.ico HTTP/1.1\r\nHost: participate-ondo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://participate-ondo.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 22 Jun 2026 19:50:14 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 15:12:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSCr0YAQOuf8NRUflhvsjHfL9s6d4YdVE4%2Fog89orRCEq3rR8VBwBJg83k09uNtbpeexpZ%2F3Lf%2F5FxfNE5PtzU8DDhs8Y%2FwwqDjMwwRVEdhNvMpbDwXKbetz1237lABM10BIbkrm8w%3D%3D\"}]}\r\nage: 31\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a3950cb-10be\"\r\ncf-ray: a0fdc7e3ccf675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2170,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c665abf00427133e89dc2c100f853a32","sha1":"886403c1ce60ebffff60780e7fcc15019f7f301a","sha256":"07465c625ddb972cc95c7211007784672c062a53d438b00b29e55193dd3263d5","sha512":"9cc6292f2d9bb3d96acb66387953b2458e700dc9f271943c45bd9f77be33c5a89848994c920b6f4404d4f24f710db141694482b55d5c843545485989ecd32765","ssdeep":"48:/Wpb3Yv8jyLw3WzGwH793rXDnGuKhWIutiwkHb:QIv5LAWiwHVbGwIyK7","tlshash":"ea915201d77d5926f16802748eb3f33017a18ded64e186022bd16f633d9df851aa79bc","first_seen":"2025-05-28T09:18:11.29665Z","last_seen":"2026-06-24T22:51:14.05309Z","times_seen":21,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}