{"report_id":"e720ab1f-0dba-4b49-b958-9356ad0147be","version":0,"status":"done","tags":[],"date":"2026-09-05T01:20:35Z","url":{"schema":"https","addr":"web-ondofinance.com/","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"web-ondofinance.com/","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"title":"Ondo Finance: Tokenized Stocks, Bonds, and USDY","dom":{"size":42090,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19927)","md5":"5ea681bdcbe4e461cdd513b0e41a9b56","sha1":"39ce5e30f8891571eba22216ec3a234bab933bac","sha256":"448176e2465a45062796a3baa0a75d16da6a604cf8b4f2ed986273119a1b716d","sha512":"df77515bef8c8adc11e99c6b306d508257d7099fe6f85adf66a3ad0e585b419582608d936f7170143a6c5f9e97d1d47ca9434fef7d95c3f9591f0ab6e51cde25","ssdeep":"768:BX1aFLhPEjgTF6DpGW4CxIITnJePaGxTtX92o1vQPl2MEfzcRcoxMgX1QllqQL:BkFLhR+pGdCxIIrsaGxTtX92evQPl2MM","tlshash":"4f13f937a7222077263305e973b6839ab39d800bd70689297ebcc55c4fc14e4d97bb5a","dom_hash":"domhashc7abf82d8419423203be1f3ddba3dfb1","first_seen":"2026-09-05T01:11:07.217456Z","last_seen":"2026-09-05T01:20:37.1021Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"web-ondofinance.com/","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:20:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"web-ondofinance.com","ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-09-05T01:11:03.556123Z","last_seen":"2026-09-05T01:11:03.556123Z","alert_count":0,"request_count":4,"received_data":1321607,"sent_data":2099,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web-ondofinance.com/","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"77240c62af1a313dcf5d7df914e69bac","sha1":"3ffb9d98509fd47637ab6cc30c60bb8b3fa29630","sha256":"bb12c56197301b00b9d38c6a13cd770283ffe5df31a68960285da4e50e7a72af","sha512":"81c61d0236d0fe33a51d9cd090bfcc1e22d1a99f06e16364061b8fd8e7db4b93667231d2ccce0a0894ebe8f3a17c09f36da838c11e9e477f71670f6ce0a4ace6","ssdeep":"","tlshash":"1331ac2f92b7147a01b731aa979bd36477211047a006c80b3e9dcf441f81a716df2eea","size":1569,"data":"","first_seen":"2026-09-05T01:11:07.222947Z","last_seen":"2026-09-05T01:20:37.106156Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web-ondofinance.com/assets/images/fbd8c6df072d436eab63dc505570da5d.png","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web-ondofinance.com/","date":"2026-09-05T01:20:06.103Z","timestamp":1788571206103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-ondofinance.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:37:13 GMT","end":"Mon, 16 Nov 2026 13:37:12 GMT"},"fingerprint":{"sha1":"C4:CD:8A:30:85:CD:49:E6:49:EB:D1:A8:A3:97:EA:67:E9:BD:AC:DC","sha256":"4B:E1:11:13:A5:7E:AB:5F:E3:8A:F6:F2:B0:CD:3B:2E:7F:E6:C2:7F:BC:D7:99:91:5C:D6:C5:44:E4:13:9B:33"}}},"request":{"raw":"GET /assets/images/fbd8c6df072d436eab63dc505570da5d.png HTTP/1.1\r\nHost: web-ondofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web-ondofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 05 Sep 2026 01:20:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 1145111\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Aug 2026 21:10:04 GMT\r\nETag: \"6a7f842c-117917\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1145111,"size_decoded":1145362,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"050a5728ca5fa240c9df66763002be7a","sha1":"211edd8111011ebe9349e7a7a76074e803f8fec3","sha256":"4da0d9531bf24e13daa0db028556c9913a65176632812b7d09017df87d909244","sha512":"2b7da838746ac40f9dbe55bab8287814b154a67eefb47d14b3bb10b69e39e16159c0a235cbf4b3728e6aafd5078d30ed1fa184b9d94be4a5f61bf96cad2fdf8c","ssdeep":"24576:FD3G433Z/u4TqnmKQvKJvLHPIy0bzN56A:FD3G4IzmKGuvO5t","tlshash":"b12523b26d9aadb33cd3124558235798527d7a8cbd44fffc1ef35901c32218a86b582d","first_seen":"2026-08-18T02:41:23.114727Z","last_seen":"2026-09-05T01:20:37.103159Z","times_seen":4,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":259,"receive":338,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-ondofinance.com/assets/favicon/favicon.png","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web-ondofinance.com/","date":"2026-09-05T01:20:06.333Z","timestamp":1788571206333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-ondofinance.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:37:13 GMT","end":"Mon, 16 Nov 2026 13:37:12 GMT"},"fingerprint":{"sha1":"C4:CD:8A:30:85:CD:49:E6:49:EB:D1:A8:A3:97:EA:67:E9:BD:AC:DC","sha256":"4B:E1:11:13:A5:7E:AB:5F:E3:8A:F6:F2:B0:CD:3B:2E:7F:E6:C2:7F:BC:D7:99:91:5C:D6:C5:44:E4:13:9B:33"}}},"request":{"raw":"GET /assets/favicon/favicon.png HTTP/1.1\r\nHost: web-ondofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web-ondofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 05 Sep 2026 01:20:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2624\r\nConnection: keep-alive\r\nLast-Modified: Tue, 18 Aug 2026 19:40:08 GMT\r\nETag: \"6a84b518-a40\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2624,"size_decoded":2869,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a3e94aa5195ec68b714ba5a332408c28","sha1":"d6850d9d1271d48e53fd013cb87eb07bfe060033","sha256":"24b251fcde5b995941ac8b8cab1dee42a57f1e1f86b6640986c05e02d4c66c28","sha512":"b4bbe88a847c5ae132107026147abbf7ab61cf5734430c7ac2e34de06224242a6413c19c41c31f0e1eb288a421839a149caa3c728b791f633e849262195fbe3b","ssdeep":"","tlshash":"0c515bcb12e1039f62849834b5dd8cd7d4dbeb6c6a46b3900b2ce74d8c9068f60ca17d","first_seen":"2026-09-05T01:11:07.222092Z","last_seen":"2026-09-05T01:20:37.103744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":28,"send":0,"wait":95,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-ondofinance.com/","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:20:05.624Z","timestamp":1788571205624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-ondofinance.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:37:13 GMT","end":"Mon, 16 Nov 2026 13:37:12 GMT"},"fingerprint":{"sha1":"C4:CD:8A:30:85:CD:49:E6:49:EB:D1:A8:A3:97:EA:67:E9:BD:AC:DC","sha256":"4B:E1:11:13:A5:7E:AB:5F:E3:8A:F6:F2:B0:CD:3B:2E:7F:E6:C2:7F:BC:D7:99:91:5C:D6:C5:44:E4:13:9B:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web-ondofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 05 Sep 2026 01:20:07 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 18 Aug 2026 21:54:40 GMT\r\nETag: W/\"6a84d4a0-a323\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41763,"size_decoded":13805,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19606)","md5":"cf451858c0898e50c70f898c5da90296","sha1":"8ca281ca609644bf96810052fa07b8bee98947cb","sha256":"2f915fb78b21f860029473b5f476273dc8dc74bce1170ea2fb5c68dbaf0f69aa","sha512":"463c832c4818b6da75bc5edc2af3d09d454809726423dcf0fab908601705c77c6664c26998562e4f7ebb95f6dec05f9ef4e14a69a09dfe067ce858f4ee3e546b","ssdeep":"768:pX1aFLhPEjgTF6DpGW4daRIILxvenkKMoXVKLsMX1QllfQL:pkFLhR+pGdYRII1Okn/sMull8","tlshash":"b113f937a72220772a2301e973b6838a735dc017d60689697fbcc55c4fc11a8d9bbf5a","first_seen":"2026-09-05T01:11:07.219399Z","last_seen":"2026-09-05T01:20:37.104418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":8,"connect":25,"send":0,"wait":251,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-ondofinance.com/assets/logo/logo.png","fqdn":"web-ondofinance.com","domain":"web-ondofinance.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web-ondofinance.com/","date":"2026-09-05T01:20:06.102Z","timestamp":1788571206102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-ondofinance.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:37:13 GMT","end":"Mon, 16 Nov 2026 13:37:12 GMT"},"fingerprint":{"sha1":"C4:CD:8A:30:85:CD:49:E6:49:EB:D1:A8:A3:97:EA:67:E9:BD:AC:DC","sha256":"4B:E1:11:13:A5:7E:AB:5F:E3:8A:F6:F2:B0:CD:3B:2E:7F:E6:C2:7F:BC:D7:99:91:5C:D6:C5:44:E4:13:9B:33"}}},"request":{"raw":"GET /assets/logo/logo.png HTTP/1.1\r\nHost: web-ondofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web-ondofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 05 Sep 2026 01:20:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 131108\r\nConnection: keep-alive\r\nLast-Modified: Tue, 18 Aug 2026 19:39:58 GMT\r\nETag: \"6a84b50e-20024\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131108,"size_decoded":131357,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"fa7041cfb4e5ba9234cc5875db415511","sha1":"0771b26ea7cc11c8e2457940197e625b98a2ca85","sha256":"0083e33c9733edd459394cde6bfa8ddb28c12cf15cf3196d4b118b7e87eeecd6","sha512":"7dd7a0b18b92208193ad4ef12303e1bdbf385ba7603fb03f97afa0acd4a8f6d61303f9836c7eb88379d1424da2f19cfd21d0e936f1a97946f56a34e7f70fc273","ssdeep":"3072:jYJ1/zBjufm6A4i3JHjEgpHGphcT17WXGSQI409UyTO:8fBjuflvi31A65rSFPO","tlshash":"98d3f19e016fcd024d3d659595a800628cb02a51c5a4cd35bbb2109cfabb7f92fb27ce","first_seen":"2026-09-05T01:11:07.22035Z","last_seen":"2026-09-05T01:20:37.105511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}