{"report_id":"c1389931-67b7-4f6b-9855-b94b13712cb5","version":0,"status":"done","tags":[],"date":"2026-06-30T22:00:40Z","url":{"schema":"http","addr":"ondoglobal.co","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"472c35985466cff064cabe462a89965e","sha1":"34a1c04aac4e351d8a0e3b0a33e3b59061fd9a56","sha256":"0716e36a808befe437935ff9b4b2c6b1f8f543c8e56f15f8f0ee05cd3c530822","sha512":"6e58ed21f54881f1b92affb7b6e801a3722536662a640a088489c91c849aa79d68ef6f2624fca014dcc16e794f27dc7373a7b82a7a31e4ae358a5120d0dc1477","ssdeep":"96:DJFs1Bx13gb61j1l0b7gx10UFZV4jl22D+i8kDNLeOl:H61rpnmULV4jM2D+z0sI","tlshash":"649160a544f1663b18a386a9e9d17f47af81760bce8d29417baf00e31f87d54c86f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ondoglobal.co","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T22:00:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"ondoglobal.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-06-28T11:37:22.165443Z","alert_count":0,"request_count":2,"received_data":493578,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"ondoglobal.co","ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-30T17:20:22.671662Z","last_seen":"2026-06-30T17:20:22.671662Z","alert_count":3,"request_count":3,"received_data":10202746,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-06-28T11:37:24.257257Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1250,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-06-28T11:37:22.639197Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":642,"comment":"","tags":null,"fingerprints":null},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-06-28T11:37:22.200276Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-06-28T11:37:22.211695Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":646,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":2,"received_data":587850,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-07-01T06:07:00.083424Z","times_seen":4670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/bqsfsquUzh.js","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","size":440892,"data":"","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-07-01T05:46:56.316421Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b4020bebf4d53ae3bdbe908114b38fd","sha1":"be27935df3138e5d531b745cc5a728b4a7c20dd6","sha256":"4d363f44eea8055c88910fad06d90036bd97662a886644a7ea2624c89ac6de67","sha512":"6ffac162ee647b39e2167d434d1d23912fad3c8259cd26c2f2a6aa3e28e54206365838bad412f470c76fc1c2666be1f05a711384dad94058bfaa3cf2be2d8b00","ssdeep":"3072:Lz0Usp3z0UsfKJvtwkH5E40EisJFItE2SjTEZSo/e1h07lcJhB9jmGJbTWA5rNUi:v5SvEZPsnpJT9","tlshash":"609443f8a2c7550fc7cf05c6bdf289c8d871487ed305263aaa03e695ecacce158d2995","size":418610,"data":"","first_seen":"2026-05-12T17:14:33.828157Z","last_seen":"2026-07-01T05:46:56.372745Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"876569d4e649eb2f74f701b3087e5581","sha1":"2569d9470b3ba6117c094d1598825ccdbf49aea5","sha256":"824e65767aacb31ba856c8d87a54b8ab8bc016d4e10da16bc75d6a9f1d462742","sha512":"4eaa051811efaffbedbd15758591a65cbacc24324e20af45645c8bc8743bd67d1f01dc6572127b3b6966461ed61b740e6fe56418071d16bf02a1029d7fa0f661","ssdeep":"","tlshash":"64f0c82df2245b337cbdc47f647366df3eb3612dd2052460245bad0935b4d41aae4e05","size":638,"data":"","first_seen":"2024-08-25T23:33:17Z","last_seen":"2026-06-30T22:00:45.199009Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5ada395e86fc9824943a88eea9ec801","sha1":"077ba36ae5c195b667f0dbc6178b33065472698b","sha256":"26e17a473149026f7f7b55f6ad4a79f1379728c18956451ab42aa78689f3818d","sha512":"508914b33902fe2e14f2dad0cb9e89b92c18ec09df510f5f1a7d9e67e262a52176cc3232ace90fba0eaf3fb73a1ec6116d374af8146d793af528af921ec59df1","ssdeep":"","tlshash":"bbe0a3a45f35723696ee55caa576b6ad15f62198140b550c0434dc8b407c9501fd2ce4","size":424,"data":"","first_seen":"2026-05-26T17:20:48.010657Z","last_seen":"2026-06-30T22:00:45.199547Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f94d12d484a807a282f7c4f6ccd6c354","sha1":"c63e4f41161e7bd2920368ac3bf1aaa9f2e2d03c","sha256":"fbc3b854bc4ccfb33e7d5fc85b0cf7160d5610ea2677c3b23a0a378fb6ad3bbe","sha512":"4ad8882f83fc03c6999453504b40e7a347d5db667e468ec0e23200643b40abb7d799e64d70a6e4d42b70bdf16a77bc9844abf0706069a72ebe240d5eb0a6c2bb","ssdeep":"","tlshash":"cb11213e6e2950b595a760ab876ebb403c3250b33c07d460396dec812fc8f140d3a999","size":987,"data":"","first_seen":"2026-06-30T17:20:30.455182Z","last_seen":"2026-06-30T22:00:45.200238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-01T05:46:56.294627Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","size":492622,"data":"","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-07-01T05:46:56.306722Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52b67e899609ef76feb9b304908f6e86","sha1":"3a91454ec2db719727e8eb84597a695a37c0e6de","sha256":"d92d53155cd441321ddc818c6c335ded0da3af6a3894e9c7ea46ad6cdf232308","sha512":"cd41c7228a4c353c74a52afc0b0cb7161432ae4f8fd6aaf1f61de350fe630b94f76cc16757607950b2a07c4c03a865ea5b1f6970daa4ab9d0ef2b29635f312ae","ssdeep":"6144:VRMvk59jx48/taojdhOV3E9B3snP9BqWdw7wFBSzWb3ckXQF/91uqjk2:V2M/l48wIrjByzGy83","tlshash":"1c35a1e78799dd3f885e85298e3c6d9c40b62c73096da19ef453b258c4fc2524bc7b88","size":1150545,"data":"","first_seen":"2026-06-02T08:49:54.164781Z","last_seen":"2026-07-01T04:46:52.256349Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-01T05:46:56.290162Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75451a37a7b8f9c2558aca4152a5e107","sha1":"bb734834de6eb19095fdfbb19eeb62bcb06be688","sha256":"2723a4ad7240c7bee853d4d4ef5d7eaae882c4d6b5358e86d337cf726be1e80f","sha512":"7383392c5a4320c0f151ff1b88f98f5e1136ec96d6cf82b5b75f632a5ad0ca2fdf7c346e1d57457963ae76cae89b00da3d5b5dbe749b26ab8d13d88a37a2b180","ssdeep":"6144:UK1Ttbhyjg7laKnyNY4ZVnF+5+SONx5TxpVQzGH+nqJoCFLSBC9YUJfdXBgvuRUf:UKJl807l/4yEPa","tlshash":"6b94acb80ff3d8aaca5df4046fb07189d6b97d223e782c44bd77230656fe18112d691a","size":445343,"data":"","first_seen":"2026-06-02T08:49:54.161415Z","last_seen":"2026-07-01T05:46:56.348987Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"340d91dcf13b076921b75300ec47f83a","sha1":"c890f2491c91c557a44ba929c67e08b5944d53ba","sha256":"4463ac697265105c186e84801bbd5bad264f59470d34ff3ec348367d6f2e6f67","sha512":"bf78f6567574d468f2e4255befb3eda23d84676cae1c3da368fbd8763c723eac5e8bbb01f772db90a140a95ae88fde992ebf4105575fe08502e64aedc780658a","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGPQXp91gGT8b:QQqJr/0SVwZmzHCP2aIW","tlshash":"ff55b0e70ac1c92da4afd921ce3c0c7c40f656622d79218be553e9dae6cc3754f8ab44","size":1320082,"data":"","first_seen":"2026-06-02T08:49:54.163198Z","last_seen":"2026-07-01T05:46:56.383576Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v2.7","filename":"https://fonts-css2-sans.b-cdn.net/index-3ebeq329.js line 1 \u003e Function","line_number":14,"column_number":900056},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj128 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.8497188345718898] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj129 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.782856812513e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj130 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj192 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj193 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj194 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj195 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj196 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj197 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj198 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj199 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj200 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj201 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj202 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj264 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj265 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj266 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj267 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj268 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj269 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj270 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj271 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj272 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj273 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj274 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj336 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj337 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj338 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj339 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj340 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj341 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj342 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj343 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj344 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj345 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj346 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj349 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.8497188345718898] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj350 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.782856812513e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj351 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj413 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj414 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj415 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj416 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj417 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj418 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj419 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj420 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj421 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj422 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj423 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"error","text":"Failed to import Coinbase Wallet SDK:error loading dynamically imported module: https://data-image-svg--base64.b-cdn.net/assets/index-65381a41.js","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","line_number":374,"column_number":95290}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:04.936Z","timestamp":1782856804936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 22:00:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2302721\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l522Q39cX8jjka1NbVNyv%2FwIchN4%2F07OKLAMNt7paVH9zyYV7aA9P2Tn3Q5H6f3Xi4t8W9B5akvE9CRzRcnnjk5B8J8XKgWXfXJ%2FIAX%2FF7Euz8%2BKGGBjSPO0smmb4PmRr78%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a140713ed8a2568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522095,"size_decoded":159697,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-01T05:46:56.294627Z","times_seen":347,"resource_available":true,"data":null}},"time_used":6417,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":8,"ssl":6396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:12.476Z","timestamp":1782856812476,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T22:00:04.162Z","timestamp":1782856804162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondoglobal.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 20:37:46 GMT","end":"Wed, 23 Sep 2026 21:36:17 GMT"},"fingerprint":{"sha1":"3D:0E:7C:11:4B:7B:12:2B:69:25:16:A7:33:03:77:95:5F:6A:61:4A","sha256":"60:F6:BD:C6:76:DD:58:BF:81:82:59:73:17:63:75:44:92:F9:F5:3C:EF:DA:5C:A9:D5:77:41:45:72:10:1E:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondoglobal.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 22:00:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 19:48:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Btyl2aMWyeNwsurLdohQwMCVRwI4Re8B5xiqktrcKqR8s7KtBouajh7plBMtHttM9svxoE8YqoOYtprOLjLjWvLQ6t4AuDMR1HvQaAen9uMbp3GI2ux81tCvKB3RC8Jc\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 16813\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a14071128c46b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9759122,"size_decoded":2757386,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"8605615fc27d95aa63a58638e3b1a32d","sha1":"4cbcdcc217cdb6bab0675ae3b332491c45843617","sha256":"746a0fc004f81302ede02da703c6378739ce702cb01fd06c2a68181279b1b902","sha512":"040ee43d907d87624fdfb36d12910b6cbf14ade8e2ef74299b557aa45984638244f6fb6151459dfdaae63e3ed459fd7ceffb64cf843e1317683a6c069aa07a4e","ssdeep":"24576:ur+WXcztrcjsNMXmZpjrqRqe6Sp78Evh8Cedza:urA+jpRqe6y8Cedza","tlshash":"2f25f17b672572397927c52d52a8228d8920dc02e9878aede1f35f15cbe73d33b6610c","first_seen":"2026-06-30T17:20:30.43671Z","last_seen":"2026-06-30T22:00:45.195149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":61,"connect":1,"send":0,"wait":34,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"ondoglobal.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:12.009Z","timestamp":1782856812009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-1aoGusm.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 22:00:12 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e004d-7844e\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:33 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2026 18:52:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 388f73d2713a3393c3238dc3a6506495\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":492622,"size_decoded":110466,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f69916dd58afc7cf352911d30199db30","sha1":"71ca913263ab12e32ff882582d474dd37417532f","sha256":"7f73d92880d8649e98f9a825f853cb8656fef7b67e0054f4545b891ec8f78663","sha512":"73342ca7345bf3880f3de4525f6cd31ece8cf983927e695032ead3af3480e81ddf44fcce0c0491aea89807951c0e258a58a2f2e1f8dc984670c5e2e98e00f6cd","ssdeep":"6144:VCfpddNOjw711wgmlnW3ZtnFW5ESuN55LxfVyziH2nuJOC/LeBO9QUJ5dFBEvsRQ:VCBP0k7WWG2ZE","tlshash":"90a4a9790ff3c4a9ca5df404afb07d98d6b57d213e782c41bd76e30696be28016c2a19","first_seen":"2026-06-02T08:49:54.13099Z","last_seen":"2026-07-01T05:46:56.306722Z","times_seen":141,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":14,"connect":3,"send":0,"wait":13,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/accordion-3.14.5.min.js","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:04.525Z","timestamp":1782856804525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondoglobal.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 20:37:46 GMT","end":"Wed, 23 Sep 2026 21:36:17 GMT"},"fingerprint":{"sha1":"3D:0E:7C:11:4B:7B:12:2B:69:25:16:A7:33:03:77:95:5F:6A:61:4A","sha256":"60:F6:BD:C6:76:DD:58:BF:81:82:59:73:17:63:75:44:92:F9:F5:3C:EF:DA:5C:A9:D5:77:41:45:72:10:1E:1C"}}},"request":{"raw":"GET /accordion-3.14.5.min.js HTTP/1.1\r\nHost: ondoglobal.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 22:00:04 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 19:48:22 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=2,i=?0\r\nage: 16812\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dhe7IdtE2etqejnn6%2FCfNUX1UZKStIyey4PKBTyLpdTPDGCLJOvKCAN0HfV9yIfEPkgsq82N6FWON9z4iUwLA3QJleSwqur%2Fn4jEOgK%2BicVdOyjxR0cNrk36zYsTfO93\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a14071144c7cb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"ondoglobal.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:11.765Z","timestamp":1782856811765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ondoglobal.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: AWOHYkZfv9ng4ePZz0PKMQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 22:00:11 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: EumqD9HiG/xoEjSDR/WZaRqVgU8=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":65,"send":0,"wait":45,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondoglobal.co/bqsfsquUzh.js","fqdn":"ondoglobal.co","domain":"ondoglobal.co","tld":"co"},"ip":{"addr":"104.21.75.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:04.527Z","timestamp":1782856804527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondoglobal.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 20:37:46 GMT","end":"Wed, 23 Sep 2026 21:36:17 GMT"},"fingerprint":{"sha1":"3D:0E:7C:11:4B:7B:12:2B:69:25:16:A7:33:03:77:95:5F:6A:61:4A","sha256":"60:F6:BD:C6:76:DD:58:BF:81:82:59:73:17:63:75:44:92:F9:F5:3C:EF:DA:5C:A9:D5:77:41:45:72:10:1E:1C"}}},"request":{"raw":"GET /bqsfsquUzh.js HTTP/1.1\r\nHost: ondoglobal.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 22:00:04 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 19:48:02 GMT\r\netag: W/\"6a399172-6ba3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 16812\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4PW0IdiJtLFKxkpRDmZS53LDzP0uEEyN%2FPXfH7B%2Bxu4WY57TyaFkTvwdR6oTOfKAWP9NXBZ%2F%2B7HqZAJ4HBWhE6a8x7l3ARoKCh8R5B%2F3B7Q9kjrAABvVJ6Dra%2B85KQJ\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a14071144c7db515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440892,"size_decoded":112981,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-07-01T05:46:56.316421Z","times_seen":257,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"ondoglobal.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.248.54","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:11.505Z","timestamp":1782856811505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ondoglobal.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oAI5zZmz3U4Wc1pvgJ/WGQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: eFGwSoWpaVk01iCI/9P5LmQl0KA=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":106,"connect":119,"send":0,"wait":41,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:11.496Z","timestamp":1782856811496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ondoglobal.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: EfdYQpP10l13PSslJV4t3g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 22:00:11 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: o86MR1nrrvv0DMTMbu/rQYHsHO4=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWBKCydeNJ3NLT; SameSite=None; Secure; path=/; expires=Tue, 30-Jun-26 23:00:11 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a14071403a2e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":43,"connect":37,"send":0,"wait":299,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:11.531Z","timestamp":1782856811531,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ondoglobal.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Z/vOyaJVuoqOH9vooFwwJA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:11.493Z","timestamp":1782856811493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ondoglobal.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: su6V1ChIuPf9qAYiyITtyg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 30 Jun 2026 22:00:11 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: keCOqIs8IgmLufHSe9FZ/90JQr8=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T06:18:57.609831Z","times_seen":16882197,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":120,"connect":139,"send":0,"wait":61,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondoglobal.co/","date":"2026-06-30T22:00:12.226Z","timestamp":1782856812226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 22:00:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 4105275\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYW0L4UpdpS4eOUjaXYOf7GG%2BIUXaQUcfPSjv9jhIKDNKPDDlpKA403Dkb2L5ep6yD5IF6mwSAxnfx4X%2BGrF8Wl0RGv4Zw%2BghaqX%2B2qyg4kCPoXQCA3aooEvlf8BGMkSWX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a14071447fbb2678-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63432,"size_decoded":24474,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-01T05:46:56.290162Z","times_seen":428,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}