{"report_id":"d2c08818-04e3-4621-ad59-c4572666f621","version":6,"status":"done","tags":[],"date":"2026-02-18T13:22:28Z","url":{"schema":"http","addr":"ondofinance.site","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.23.196","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ondofinance.site/","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"title":"Explore | Ondo Finance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ondofinance.site","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.23.196","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T13:22:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ondofinance.site","ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-02-18T13:03:23.035281Z","last_seen":"2026-02-18T13:03:23.035281Z","alert_count":18,"request_count":18,"received_data":6898455,"sent_data":8183,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ondofinance.site/chunk.0.vifuyp85.js","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"619b00cd76db0b31aa203ef1446a93b0","sha1":"7cb1433553f4c8514df643dd88934e23dcbe66ed","sha256":"94a6fdf7d07936692a2981cbc8f64c76ecb02c9b02a489846695dafeab80ee1c","sha512":"f7b8d9b090e01ada5c134cf2acd3bb74a749b9f3fc82a7b051bdf3b2201ee891b2e49e8f6947bfdf43867c9bbb4c25a7343f7fd311eb935d098a3c83c1b561d5","ssdeep":"768:Dxlu99qvacsB8eyCKl8eyCKm3nC9ZOaoNlvbN1Urg4hXkrg0autZKySYsA2TczTT:aLibNkS3tYVhogGD8KBUkaxPJKSy","tlshash":"1724ebeadb5780ec8e6611ced073f905e4585923ce6cb453a52eedc1792df26808317b","size":210640,"data":"","first_seen":"2026-02-18T13:03:24.857665Z","last_seen":"2026-02-18T13:22:30.656845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-12T06:39:46.90208Z","times_seen":1967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-11T10:54:04.310295Z","times_seen":3240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ondofinance.site/fon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /fon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1548\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fd33a20cf8242f1cac7c59cfe303663f-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f75722ac6fb75c082f4dd85c054f0c77","sha1":"bcc0628c3b808361a95c642edfd6a393facf7cb1","sha256":"1e9385d0ca88be351d74e411d6bd4b81e6a9af998015119abd98758a71de29c1","sha512":"2f5dbd09c96aae8a280476ee269a975c2485425c98c0b2bef4a5a6940a79c631a55745dd6be31870dc39d3c6f80a606b00a2bc3522a59c26bea18d3fc118195b","ssdeep":"","tlshash":"bd31e993b5b20b34d31053bd48ea1357510a80a98104de5fe3295e326ac1eeec6746fc","first_seen":"2026-02-18T13:03:24.829462Z","last_seen":"2026-02-18T13:22:30.635709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/secureproxy?e=jscdn/getFile","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondofinance.site/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ondofinance.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"vc0fsb0u94pihtv7e774\"}"}},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 18 Feb 2026 13:22:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 1626\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-5621d12e4f3aa06;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b163c26dc7c9c5eb5f9e19f02223b007-fra-edge3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-08-12T06:49:10.962783Z","times_seen":39033,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/nvdaon_160x160.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /nvdaon_160x160.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1500\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2c7ef52500d02fbf70ace68f88e3be05-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d1cc9d7391e6856f0301cc5709f5879","sha1":"5c73b5c719a4d9fc6444f7eeb39ad46779a527ce","sha256":"c5084db2c06de2921b4f936d326e2f63f902538e0968a1a2931b36b3795fea9a","sha512":"869c901bc2f083c4b1a201581f7f0e90be90e78bcc62cec41cc1e55f2ff471cb9b33d53dd32f672d4448b1728e3c2cc880459bc6c983ae1d419450d5d1d5efbc","ssdeep":"","tlshash":"0731c6332605492bfd79927c609b736b849a508a0a0bc6bbf17d0e302dc7180fe511e4","first_seen":"2026-02-18T13:03:24.836794Z","last_seen":"2026-02-18T13:22:30.63794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/tqqqon_160x160.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /tqqqon_160x160.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1696\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 44773e511b2d9c63c8ea3d4c518916e5-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f23fe14f51c1ab1258176cfc31a8436d","sha1":"aaea001d020df7a032418911f89aee891d07197d","sha256":"a0d91137fb6ee91b2a8277833ad33ed8a2e572d5d76496b5cf8926102baccb7b","sha512":"5df02dccac20065b97203ab0a74f6887239a3314cf4b5cd45c2b06914bb8034fbe2bb07a2eb9b763955a04bb907d87b5661af4747bcc28e550f35b53acb4f588","ssdeep":"","tlshash":"4431f80ecb96cf10c745467d17a933cba38f15ad68a3d27d492c01585c638d9ae25c4c","first_seen":"2026-02-18T13:03:24.832502Z","last_seen":"2026-02-18T13:22:30.638666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/spyon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /spyon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1626\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f2ca83abbd2a047b2a47aa4364a23a10-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97c5d91f2ccde10e7c7167ca76ed8922","sha1":"e6e514bebcbd3efeeb13e30bb1408d27f4d46063","sha256":"3741686044e232cadaa75c1b54e10e132613b2ba177c920f32fe1655c765598b","sha512":"74687afef24c5274fb8daa1e5fcec176b9472ffc2416edfafb633cb3a32909f9971d7f68114cd25cae70a9bcb0d527f53f53eaf79ba6e04a28e60efc9e718ae5","ssdeep":"","tlshash":"5031c51ee5d2ce3bca5f693f61ab23c650124c300192ee49da182df0ce86d360b784f6","first_seen":"2026-02-18T13:03:24.839598Z","last_seen":"2026-02-18T13:22:30.640587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/sqqqon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /sqqqon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1696\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e0809f7d33277e6c2cd409243d220975-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f23fe14f51c1ab1258176cfc31a8436d","sha1":"aaea001d020df7a032418911f89aee891d07197d","sha256":"a0d91137fb6ee91b2a8277833ad33ed8a2e572d5d76496b5cf8926102baccb7b","sha512":"5df02dccac20065b97203ab0a74f6887239a3314cf4b5cd45c2b06914bb8034fbe2bb07a2eb9b763955a04bb907d87b5661af4747bcc28e550f35b53acb4f588","ssdeep":"","tlshash":"4431f80ecb96cf10c745467d17a933cba38f15ad68a3d27d492c01585c638d9ae25c4c","first_seen":"2026-02-18T13:03:24.832502Z","last_seen":"2026-02-18T13:22:30.638666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/favicon.ico","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 12011\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 13:22:05 GMT\r\nlast-modified: Sun, 15 Feb 2026 15:46:32 GMT\r\netag: \"2ee7-6991ea58-bce7de52e66fe9ff;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1ce830ae42feb4e11a9f9e8649fdb466-fra-edge3\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.412\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12007,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"055daa8924aedb430a5313283bcd28ee","sha1":"1fad23a11533b8408345267e9c34aac620153a1e","sha256":"700ab482214cac6ca7eddd4d74256860604ceabe4bedefd0324e44fd3b1576a6","sha512":"6eb664485d9befc1fa2a683a9f62fd088d29ba1803ba9cfdeee24a11ca79e05019a2555d45be6638ee70f082c43a5daa0dc9942f0ae3e9fbdefe27c2e7b907d3","ssdeep":"192:IRtVZVuKrC+g4lSBdzDowU+92mfbX2mlsTpUfn+TRaluaaOsEs/w9TM:IRtV75gpB9Do69ZmmuCneRLaa9Es/KTM","tlshash":"b642c0dc1310b2ab1f4d6575985e1bc28671690d0c6f4f8fde79cc0fea7e1841849b58","first_seen":"2025-08-14T22:56:29.206535Z","last_seen":"2026-07-28T17:22:11.665825Z","times_seen":150,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:22:03.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:03 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Feb 2026 15:46:50 GMT\r\netag: \"32c2f6-6991ea6a-4a10238a9cba8d4;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 131d12ef878ee782f0d4e2e5a0dfbeb5-fra-edge3\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.137\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3326710,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28206)","md5":"0281b165602f872ff4559ab15b5ec9a4","sha1":"5d1c0d6ef3e33a897c45bccf4a34b7e7edd80089","sha256":"c58181c1a960f1a7d4483376146c65df88b5aeca2900665217cd630eef2e6091","sha512":"def4d7814cddff23a7e0a81477468136088e187dc0bee5fd3346bda22cb2d0374598b2b02b0761d662b26ce4c06e3dfc3af0a1062faca360ac9f32def54fb7cc","ssdeep":"6144:QYTCeZAW5huttpOzKh08G5CyhsiLoll5SGBvVO/D/7aFBIov+mPWv:/CeTzovLPWv","tlshash":"c82560e712c0bcfe612fc79a70720a35101bd2f7f6429ecca582b67f457b8aa150552e","first_seen":"2026-02-18T13:03:24.851157Z","last_seen":"2026-02-18T13:22:30.644781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":85,"dns":18,"connect":25,"send":0,"wait":167,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/chunk.0.vifuyp85.js","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:03.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /chunk.0.vifuyp85.js HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 34967\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 13:22:04 GMT\r\nlast-modified: Sun, 15 Feb 2026 15:46:28 GMT\r\netag: \"33822-6991ea54-3f9ee6221c7ae31e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: de2f8cb73ae745b0e38e4a1af47062c1-fra-edge3\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.425\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":210978,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54274), with no line terminators","md5":"d3e5a958ab9a702db704d2af3230fdc5","sha1":"131e9725ce3a87e27a9d7c50c36bd03612184e04","sha256":"6b8d0379de0bde453f19564188418bded0bebed0d3af57c10438b7c0a2a2ecfc","sha512":"8c719654df0c05e7ebfcbd8dd5249aae833da9f59942402bce1b08b5dc9c92c96e614526956e302f021b541b1470709af13c7fc3892d37205753e7731ca4f49a","ssdeep":"768:Dxlu99qvacsB8eyCKl8eyCKm3nC9ZOaoNlvbN1Urg4hXkrg0autZKySYsA2TczTh:aLibNkS3tYVhogGD8KBUnekMyKSy","tlshash":"f0240cd5db66b2ec8e5521cec073f805e6d84923cd6cb053a52eddc27929f2a848317b","first_seen":"2026-02-18T13:22:30.646894Z","last_seen":"2026-02-18T13:22:30.646894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/b36ced62826f3bd1.css","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:03.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /b36ced62826f3bd1.css HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 531\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 13:22:03 GMT\r\nlast-modified: Sun, 15 Feb 2026 15:46:24 GMT\r\netag: \"959-6991ea50-995aaabdca026fc2;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c278933d87b778c298302df08e8a4488-fra-edge3\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.299\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2393), with no line terminators","md5":"c8d9eaefbbf5e6a6559176bc2c0eaf61","sha1":"c907f347c91fa78ad7bf4656773f30e2e539c300","sha256":"9cb73f4067a6767da2a7c99f0324ebb50adac5d6164cfd8d993825cca561744f","sha512":"c4bc827ed0976f9b1298f3061ff740c77742e7a2a8c9c7382887352daf9d908c7e5523ef7191a44be87a75df274bcdacb011901b6b5a165fff8818820fe5ca56","ssdeep":"","tlshash":"93418924401ed071a4f18e93358efb22255ea95189fa0972f167095c8cd7abf63e0f78","first_seen":"2026-02-18T13:03:24.845392Z","last_seen":"2026-02-18T13:22:30.648075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/rivnon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /rivnon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1484\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ce12e0e38c0da9f4cc5ee0c4df153223-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3be52464c1cf26ec4eec7b8ef76fd5a","sha1":"7fe778cc7cad480755d91ec50c7ad91582bfe418","sha256":"910cec049fe4b09c7a654b43b1caca030c5f2f4a060f11ef442c6fc9a9069d36","sha512":"cdcfd944200521bedcc0084015a5181d49ccead037eafb34a52c7ae550b2a738db8b1df8c926929dcb1662e1ea6dc153cbc263bf33b4d1e2c25025d4f305ddaa","ssdeep":"","tlshash":"1d31e919e42f4e38cd15ed388845b727a5789e05a48fd526f3040ade9fd14b8b8a6c80","first_seen":"2026-02-18T13:03:24.859339Z","last_seen":"2026-02-18T13:22:30.649244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/plugon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /plugon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1512\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: df234c28d523f4506067117de4aa17ca-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a5f1c0c71954308ce55b2a99a01c50d","sha1":"a5e066de88db1c71941aa4ee5102b019124e5149","sha256":"bf109e9bd3d2867011793f31515bc9d69c3a38268b7737cdb5fa8dd21c061ee6","sha512":"b448a299af6d9cd1cd622d1e8c6bf573765894daa61ad1f6fc476fcc5504e0df3d5e4d94d8c42ae107f5fd9f7ceb67c74fe001301fc4253a6be62521971feedb","ssdeep":"","tlshash":"a231c79bda215b24cf1094bd89923b314c51edf07520d36711b8cd29dd6a0c9ebf10ce","first_seen":"2026-02-18T13:03:24.849515Z","last_seen":"2026-02-18T13:22:30.650344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/grabon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /grabon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1416\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f45803d8aa69fe3e4b0bfeb4cd5fc677-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"228c61cd71955db5bfb164faddf9b275","sha1":"dc3059f5ca7229b4b1595358c779d702ed684eab","sha256":"21279fc14bcc19d81ea38f4c5848f0bbf1e74c816bd77c2786759567dc8e7d08","sha512":"e438727c0b39d4d739591aba9a3a0db81e6b07ea41b148debcfe25dc1c91ddf30a69de70f48b39b2b2cd29682909a04df49f1eddd31ea19a5fb8c0f7f4aebdfe","ssdeep":"","tlshash":"e621084b1a6c9835d953113c24c3fb95842f0876f60821892b491928cc0305a8feeaad","first_seen":"2026-02-18T13:03:24.856105Z","last_seen":"2026-02-18T13:22:30.651443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/slvon_160x160.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /slvon_160x160.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1470\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 560146211272f3275a90550ea989f53e-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba7e4da8ff1528987884c06e8a8494c8","sha1":"2933208c9e11dc801f7da7c58a5bde3b81f0c0e6","sha256":"ba4eab74fa97377d4250080d707249d9b56d86d23f4479f960bc059260827f5c","sha512":"763fb1f8ffe39661163a08287a001ef4e1453f2c70fba477224f27f945092a53cc2d25ac9b467a61ee20eecdd282cc43f2d3819832d200fadbe289085be1d132","ssdeep":"","tlshash":"8031e9034b284c43c24244bdf987cf5c619094050f29f6db811640380ce5dedfe7c6d6","first_seen":"2026-02-18T13:03:24.852902Z","last_seen":"2026-02-18T13:22:30.652439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/favicon.ico","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 12011\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 13:22:05 GMT\r\nlast-modified: Sun, 15 Feb 2026 15:46:32 GMT\r\netag: \"2ee7-6991ea58-bce7de52e66fe9ff;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 03369c0b7c70c21a49a77c9bf156cbb8-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12007,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"055daa8924aedb430a5313283bcd28ee","sha1":"1fad23a11533b8408345267e9c34aac620153a1e","sha256":"700ab482214cac6ca7eddd4d74256860604ceabe4bedefd0324e44fd3b1576a6","sha512":"6eb664485d9befc1fa2a683a9f62fd088d29ba1803ba9cfdeee24a11ca79e05019a2555d45be6638ee70f082c43a5daa0dc9942f0ae3e9fbdefe27c2e7b907d3","ssdeep":"192:IRtVZVuKrC+g4lSBdzDowU+92mfbX2mlsTpUfn+TRaluaaOsEs/w9TM:IRtV75gpB9Do69ZmmuCneRLaa9Es/KTM","tlshash":"b642c0dc1310b2ab1f4d6575985e1bc28671690d0c6f4f8fde79cc0fea7e1841849b58","first_seen":"2025-08-14T22:56:29.206535Z","last_seen":"2026-07-28T17:22:11.665825Z","times_seen":150,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/coinon_160x160-1.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /coinon_160x160-1.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1778\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e03f68cb46cd02d51f0d84fdd1d44b80-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b64131e9fa46700bc9ea89342a5b653","sha1":"f48173042e1e6aeea046ab6a116aec67130ba4cb","sha256":"4255af99aac1d41ea9bbd3a538da03a74274266015a42dc05b3619392ec3400e","sha512":"2f54e2ce6659a7c73c34f7277091295f58f59e2f9c37c0fc808e09a3962a906fe270abbf9b4a304803d8eb904b0564cd970a472b54ee718b4262d2b516bf2e6e","ssdeep":"","tlshash":"be31e607b231ce80ea1f18be20d5eb35e1534cc1b859e9ada28987592cc248059e4ca6","first_seen":"2026-02-18T13:03:24.847677Z","last_seen":"2026-02-18T13:22:30.653467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/gemion_160x160.png","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:04.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"GET /gemion_160x160.png HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ondofinance.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1610\r\ncache-control: public, max-age=604800\r\nage: 732\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 611e3658e268cd8e316180caf4a1514c-fra-edge3\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb1daff12febce8ead4c1a8c227c7600","sha1":"a616720cbc0652ab4576dfaaba354220d6624fd6","sha256":"17ab578d17f601309c770a2fdc5af1c269a51b84dc6da7df2f3eab51870ca4e2","sha512":"786f83b6e4f2ffc5fadc66f183f5a07f4ac4a4aad9be588559938eb62ddb023899a03c8ebea706275e21a56849fe557d3cd54b034f8e31e8d7b1817b990063b1","ssdeep":"","tlshash":"7a31e704a76399d0f5d66f3aeea5f7079495ac023c25941a21260ba8ce49c02a71aad9","first_seen":"2026-02-18T13:03:24.854584Z","last_seen":"2026-02-18T13:22:30.654907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ondofinance.site/secureproxy.php?e=jscdn/getFile","fqdn":"ondofinance.site","domain":"ondofinance.site","tld":"site"},"ip":{"addr":"92.113.16.162","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ondofinance.site/","date":"2026-02-18T13:22:05.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ondofinance.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:47:46 GMT","end":"Sat, 16 May 2026 14:47:45 GMT"},"fingerprint":{"sha1":"65:FB:A2:AC:44:89:DA:78:B5:20:97:46:EE:DB:5C:BF:04:85:6C:CB","sha256":"47:A0:BD:C0:2D:2A:1D:52:65:07:0B:87:DF:98:8E:76:DB:A5:E3:90:30:61:9F:D0:49:B4:2F:2A:5E:BD:77:D9"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: ondofinance.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ondofinance.site/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ondofinance.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"vc0fsb0u94pihtv7e774\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:22:06 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.3.28\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 13:22:06 GMT\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6e13067850d1ec13b45af9bbe5e786ef-fra-edge3\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3305111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4c052ff5be8404f1709620d854895b51","sha1":"c93df22f8226c2a7b1c986761d04a271a1b0057f","sha256":"fce4a44d7d2f3a3ae129a7171afc5462fbfaf2670540c5e661809f4c3db01599","sha512":"d86a6e78711128d3427f1683e60dd1ecc4cebc0ac8556370ba1d56992b0fdb08de454872c14a12689bd7a7c2071104269bf9ee24db9c72d94635c6a86a5ee47e","ssdeep":"24576:JTb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeMlg505r:JfGkwdNZngkd","tlshash":"df2523d2af5b983ccf1c5da850ef6e0f6c0408175089a6fef958e88725d6b7041eb978","first_seen":"2026-02-18T13:03:24.842948Z","last_seen":"2026-02-18T13:22:30.656027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ondofinance.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}