{"report_id":"1fb00003-c372-4243-b419-b1596f79eafb","version":6,"status":"done","tags":[],"date":"2026-04-30T10:55:34Z","url":{"schema":"http","addr":"skyeco-votephase.com","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"104.21.49.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"skyeco-votephase.com/","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"title":"Sky Governance - Governance Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"skyeco-votephase.com","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"104.21.49.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:55:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"skyeco-votephase.com","ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-04-30T10:55:36.425896Z","last_seen":"2026-04-30T10:55:36.425896Z","alert_count":17,"request_count":17,"received_data":6879426,"sent_data":7829,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"skyeco-votephase.com/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e7408e947111bc63fe7354d37035a6","sha1":"a18c27f69aaa69ca059026257f3b3f8d2e7f98c8","sha256":"d12317a02bf0dc0ad7d8b86bf587ec9a475eb21f4041506e3884bd8bc32593ec","sha512":"6d1cb03d90c0609e9ac46dc448052fef7a78ea5a7b7a7143f61d899f18a4c30be27df59fbfcf698b1f5bb8bbeca065e594939c7711589784c22250f7a03fe18d","ssdeep":"768:PAbVYcdqfggXs3EPIHtucNbjW4Pv6MnTZh3bBVgPj82W3cq7cKch50sbWcWFwcfV:xfN83EPIH9GC6S1pbBiP/qouPGyfr","tlshash":"8f63a8d6680ad4e68d5524cdd437fc09e0688963ccadf053e62cedc5b81ef69a44b23b","size":70464,"data":"","first_seen":"2026-03-24T12:03:34.920424Z","last_seen":"2026-05-09T13:21:44.24829Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02e42e26f2d4efab14905fbfb2978c10","sha1":"df88d0803437644f779e66b901f4fc17228b4c3f","sha256":"b8752c9eee3f04b9ff94552a2d0b7bd69e32ce7435ca3cbd1c7b42db66815f0d","sha512":"b10304fca1385233ff2a446d080a870cf86f68f5679f1b232b3701ae14eb78c7c2bd5a93ac2f74213f458d2f101dee0ec9f33dc32563cdcf1ac764579dec311e","ssdeep":"192:w8kdES6CMz8feKSXCcuUS6C95btjOSI3hrZUMKftymJHvCY:w0z8fm4pjk4","tlshash":"78d16d6d9f92063798abb5bd8f9bb080292284275909ed303d4cd142df8cd3997f6f94","size":6752,"data":"","first_seen":"2025-09-09T17:13:15.573075Z","last_seen":"2026-05-10T23:47:57.120275Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e154d7a74a29d4a158c5b6060ce92ebd","sha1":"2b3a668ed8b7f31863f16b299e580e2d9d497d95","sha256":"a48f48a8acc4ce735c3f1625d2182b0932e3678ebcada79282bdcd5aff7e4c57","sha512":"9422d02e41071939edde384d53f96420f02dc75ff83f0803eb277d3021f7b4f6341506619964d59a6cd0cdcdd86a7d397bf05d0f06c23adfd3d91aabae4a8471","ssdeep":"768:2EDVEcDKLIYP99Y4WZQLuJ40Cg4x25lZ/fot1kZ4QRcMcBN0oFWcW/gcfLcwe2S3:SLZPTY0SJbf46lSLQsc5Mkvk","tlshash":"c563a6d5680bd4e68d9124cdd437ed09e4688d23cd6df163a52ceec0781ef6aa44b23b","size":67381,"data":"","first_seen":"2026-03-24T12:03:34.945937Z","last_seen":"2026-05-09T13:21:44.254996Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"skyeco-votephase.com/bg_medium-2.jpg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /bg_medium-2.jpg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 187027\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: \"69e91d25-2da93\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=woVlXjCc9o5Yl489drH41TlZ7EHG6GIJxOzkbt4dh1RWu6ORlbX9ivMQSvJtaTvIWBGnhQWziMV7%2FIzmV4ZJsCl9%2FqisCx898U%2BS%2FpOh3j%2Fjr7X8YHEaQjIu9DDfiIBsYTFmB2aTAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f46032a4ac94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 3556x2000, components 3","md5":"1530ce154e50d9ad6e53458ad766be8f","sha1":"5ea67c19975c6f584632bbc82d809975a5e5b2d2","sha256":"9681765e6d965408c158398122b3ed15aa4fd6025a45177c569c72e819e06cf0","sha512":"b4fe9be607be55805270fcd968bd39062e3ad41833d5cf2fe77d5df850932aaf211f21828d7a1c567a645ba8c0b21e394c03a5ad3d7a9b3026b8b704ee4a103f","ssdeep":"3072:I1g9VrInUoDR+obh0DAG/tSyWRl0ZMC6MQubOJrO8Q9gsZhL6OJ4hg:IuRRo165/C5uiJrO02J6g","tlshash":"ce04e13bf31595e3c88c2b3614d35f287ff7d8e60a6051428bac197a799a34cbd98960","first_seen":"2026-04-20T13:58:20.941977Z","last_seen":"2026-05-09T13:21:44.249379Z","times_seen":9,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/secureproxy?e=jscdn/getFile","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://skyeco-votephase.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://skyeco-votephase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"svlxx3h7lc5htno2ykk6\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0uu7Mmold7CkpDmZCpVm0A5ZxK2pfCOl6Mb3uvtOoPD9WD0WkFXVE87QlBDT4nzD4%2BTTsg%2FKURkfKmXv8y9biGMrxSMqNl3tk07pr2b9TlGOaqKXIeOZYaLW5AoYu0IvICc%2FnY%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9f46032a7adc4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4686850,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"104ad6dd9c547de494eedba91462ca5e","sha1":"d7c1c19c5300f0457e1fd686b834a84bd05ca696","sha256":"0cb04eb2be733139f03637b2b103304b445102f703c0e4dc5d288b7496a2c56c","sha512":"fb92efbf1abed8e7e07e4fd1eb2ac553a5177ceeecbd76903c82b7c058e0ac4d78bc6d61ae418710334bd1e9f0e1d5bb2259d108e7ee43fa5befc53900e92a18","ssdeep":"24576:Vb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeQ6SI51T:pGkwdNZngkvGN","tlshash":"fe2523d3bf1b587ccf2c09a4816f1e0e2c454d211488e5fee665d84732e9b6052eba7d","first_seen":"2026-04-30T10:49:17.149224Z","last_seen":"2026-04-30T11:06:46.267645Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":704,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_1.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_1.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-161\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSIVfqFrqbrc84IYcwetxL5tMkCAZL3rGO4VbRlhN1V42pX5gbzR1SxjXfs1u4MY54VdzfpCun0V22afJPy7xsBU7k64O55HJTvrsmcz%2FZHwra918v8THbq4GcRfKJmuqWCKr8WG7Q%3D%3D\"}]}\r\ncf-ray: 9f460326a9f14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93e9cecede0d11808c4fb5e2ddd4454a","sha1":"0b58eaad090fd6081cb2153879aaf9175126210e","sha256":"895d8e1162552d981cc380876c9be163df7d8f67ca5470611dc74dc83191b5af","sha512":"39091e535e247c84c78d52e19854483cbd143672acd0d75eaf9a33a01175d45a19b671e5b9bcd936edf782241378219dd427ac30f1a51394dbbb855d75ab2ab6","ssdeep":"","tlshash":"5ae026ec834e191ae2329b08abadb2e8382ba06297485008dd503e37201e94a5c371ac","first_seen":"2026-04-20T13:58:20.930313Z","last_seen":"2026-05-09T13:21:44.244577Z","times_seen":9,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/sky_logo_outline.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /sky_logo_outline.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-395\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rY9c1BttPB1pm4XJO7Dx85OPzjdbPT3HpOpkCaX3%2BEZMjGmeayPLVkQVpUGIslWVsg5QYye%2B9YwGimWh1YV5C69H2kZqlUMZ4prCuec7pqobXXVZpqS%2FtU8SpocfNEet%2FDglcD8%2FA%3D%3D\"}]}\r\ncf-ray: 9f460326b9f34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":917,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1388b5c7a53205fb71fceea7804b9971","sha1":"4e5c67b57325f04817fce1c70b037626890594a7","sha256":"55981f605419083c8440b501c386ebb8dc362f59e26845684cd73ed377f48956","sha512":"7d70d0208361ed937ef1eeaadd405feb145e6b032c9a348fc3caf25c9e018a3c9c44e425a28957355d381f0770e69d0e1e13943c9ac2a97040240771e25750d2","ssdeep":"","tlshash":"b711845ca318c269d14962787b5974ba5f277ce8598a86e8c0d4d425dc40cee4c39dca","first_seen":"2026-04-20T13:58:20.946691Z","last_seen":"2026-05-09T13:21:44.245463Z","times_seen":9,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_9.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_9.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-5fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2F0d3BEVwPHL1fOdcXXZLgbND79Esc0h55%2FLxFniQRjRXL6fYhx8s1ViOmfAKlQn7MJrCwieEGURr%2FQ7IrhxhVOaoyhY7XwB0zjKgynaEHdNil9PGtu%2B416iM3suHFhhs5x1ydtD0Q%3D%3D\"}]}\r\ncf-ray: 9f460326b9fa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e52df7bdc9efc23befca31861b1f9e16","sha1":"c7e9307f52ab09a0bd8077f27a24e2be565e1109","sha256":"4e3df5d937b547be129e7bce6d468e79685205f11185c43cacabf0d7985eda10","sha512":"350a01f5dc7d8dc7213f655fd12e245660ad9815d7f9da5035068d7a5886b7ebe99e9a3aef99df912b717bfd59c6ba6150c648df25f459a68267e9742c41b5f2","ssdeep":"","tlshash":"9a31ab56a29845e0bf06c638ee756be425713dcbf78150ef53f05e39218149bc018ddb","first_seen":"2026-04-20T13:58:20.95697Z","last_seen":"2026-05-09T13:21:44.25329Z","times_seen":9,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/improve-participation.png","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /improve-participation.png HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 117224\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: \"69e91d25-1c9e8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5zP6HAwpjCIs3LZZSwOtHRlhLU7%2BfNoomRuRAeXJ71LR2Yox5sSupEa9LPRd8aDUg4E5BhvoOdWlkmS115PEhTwZT%2FY4%2BMpkffIm%2FnSPzTAqwb96EPbukWyZ1SSfnBJCwAh5bEgXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f460326c9fc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 315 x 231, 8-bit/color RGBA, non-interlaced","md5":"89f5defc5bda66bf619bcbbccf1ef29b","sha1":"c74ba83a23cee85eb64834b356d3f6ec03dda074","sha256":"d3cee8fb0b7b8c6478b406650e7b5524f098441c5c3097b88b4fe10a88d9fc52","sha512":"556e579475e22a4a8369aa93e00ca2ba242619fbd6a49a637ed34e1d67d84fa000316e0040ec75241a312cf4a292dd69307f6adb546d53b3b757bc95b6800e80","ssdeep":"3072:1r9GjfE1hnzYU+LM8HlK6hKcy7PVGxJms5SM5PRbasV6DkGqIueZ5qjc:/EqhzYZLM6lfKcYPeRpbxV2blZ5b","tlshash":"00b31274cb803efa4edc3011afe612f1b064d382649772aa75ece4870ad45fa5349a7c","first_seen":"2026-04-20T13:58:20.940077Z","last_seen":"2026-05-09T13:21:44.248832Z","times_seen":9,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/00_visual_how_to_participate.png","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /00_visual_how_to_participate.png HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1141030\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: \"69e91d25-116926\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS5DkBlTD83TnHnVig1FRBi0IQjnT6Mx8UFWDeBn5Iw44beHL%2F1fgVmX7HtYpKDr6owksAhpkurMOuD0fwh49idUXHtOswdH45Myyh7yvhdHoe7vgK32G%2Bjg7x4zw1PPrQ6A2KF67Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f460329faaa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1141030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 4295, 8-bit/color RGBA, non-interlaced","md5":"5e4fe4aa833f84ac8a9b7d47e914bebe","sha1":"0422a0bb75d57f96ee86f553c465a127be2e1c21","sha256":"d8167d00eb4d248a2a3aa0e308853f51c2bf847fc27a21d4823968b29f340b44","sha512":"4c38861ea5796e0f9dd43d10c67841472a3b2490871940559cf7f2719e6c51d452b90246f2d46b7d99d8201b072a808d890146148242ac9b51b4254b9b793aef","ssdeep":"24576:wh6CBC6i8FzzfERNOzB12Znmd8yLfqP1iG6UYrj:wh6C8SFzrE/koZmvfqIGUrj","tlshash":"0325336dd4703da0f8df1acd8acf4391b56750ab4a4b82c68823bc9e40b6790d2d463f","first_seen":"2026-04-20T13:58:20.968689Z","last_seen":"2026-05-09T13:21:44.251148Z","times_seen":9,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/favicon.ico","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:08.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:08 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-5ba6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtWbp3mRYqrLsT5f6hNL14jU7qVYsKSR9HPn9fPIx4NlMIS9r3zra3L%2BLl6o%2Brg8TUeMsvttelxb8Mikh8Xb7ULcu95hA0KpEYFsmEbH3Wmzqk9yQ8DVNkpzd6db%2B2ERCYgoiEkiig%3D%3D\"}]}\r\ncf-ray: 9f46032c6b504e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23462,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 75x75, 32 bits/pixel","md5":"41d7871d4b550155a01b817689d2646c","sha1":"d4ff946b82afa30187afa62ca3f7315383f2392c","sha256":"dc480091e26e0310077b644eaba96749f27e0c9f717eacfa8fa15dc049311f32","sha512":"48adda874fb59c1df58f4c0d9322a88c8e25b173807501367add09cc4ec1ecef303bef4fd72f5daeeb69ab802fb274939b5da88a1c43cdbd8756cf0ceb5bd2bd","ssdeep":"192:Mz87/wSoQY1zGnvl8tvkGgcsfSPQ+vy3ggqOL/Y2:Mz8bsQ2zutvGgzfSPPa33qOk2","tlshash":"4eb2d4d2b604a550f5bb4972a97adcfa532f3da05fc120967d05f39d02b3063a23562f","first_seen":"2026-04-20T13:58:20.943568Z","last_seen":"2026-05-09T13:21:44.249929Z","times_seen":10,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":234,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_2.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_2.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-8ab\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avEGINNa%2BWAGftfGGRiEro6knre2FWIQu0ukrL4muSFmrY8RTyLU2XJ6WwdM7a2IPTto%2BjLFMQ6y43qxNZfpyk5sAyveEZ9N0u9yst6DGfdtmqnhKsEp6PTXjrFH8xYqPBo9AsB%2BWA%3D%3D\"}]}\r\ncf-ray: 9f460326a9f24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e29562bfa9c76841cd9edb3163b7513e","sha1":"87969fd26f21f609eeba80c1e858f9407255cd88","sha256":"8ddd5f51364a14ab4c596dcb185d699c5acf6f3242cb6d3174ea1026a94bd5bb","sha512":"a9926057e3f347c77501b522e0986ed38c7a4cfaf03bcbac24debe26b3a18e7f6ee924c4a0fb3ec3c6730978f289202eb7c891e955c87efbbebadf0d87bb9b2f","ssdeep":"","tlshash":"e341ffc062acfc74b00a837cc11b45e8d45ae2eeb904e4bae5851b3b1c089491c6d9ee","first_seen":"2026-04-20T13:58:20.945598Z","last_seen":"2026-05-09T13:21:44.251689Z","times_seen":9,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/948ee485dbd554f3.css","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /948ee485dbd554f3.css HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: W/\"69e91d25-d5c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLPc%2BvdgO3RVdGkQmwXiHzDaHuiXZERzoDlZ%2B7vXvXFI7epAkaxIrD%2BEOMUT6RZbDUOjZVtIznw2pc9dwYr1hqmQ24U3w17XhS4sBElj1OYnIpaNatixazghtgFp4QtZhb%2BOtNxYGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f46032689e94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3420,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3420), with no line terminators","md5":"8b68e7e2c9d8f6576072196c0f94cfde","sha1":"01d6a6eb71236f586c39be9145b7515a27c5ddc2","sha256":"05b59f9037119fc9cb1a3f50f2976a4a91c7a761d06a6d4803aadd7332463a88","sha512":"5d0102a00c56fd5c00c4f3ad5ae83814c773f2f4fac04b1c86f14cc952d7d62935c837a4421cd3c484f974ea2264f462ed208a6ba08577f7ed826003ec7028bf","ssdeep":"","tlshash":"ae6154b93b9c06f658afe16348b0b34cc617b35cdcf103cbdc64d1c08e9b6956a91a06","first_seen":"2026-04-20T13:58:20.926967Z","last_seen":"2026-05-09T13:21:44.247753Z","times_seen":9,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /main-7f8b9c1d2e5a3f6b.min.js HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: W/\"69e91d25-11340\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKDHJ1tnlzx20rKSvs5i5b0CVjAV%2BZYuL15n3BAwlrRt2lnZ7gHkSi1XBbRw6LN9vKf774iKMB8k%2FJAr%2Bq0SJ5Q%2FYhbyyXVYonpsGlphh5NTtbr2T%2BxihSIX3k7ZKXWnIAUD7qUAfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9f460326a9ee4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"59e7408e947111bc63fe7354d37035a6","sha1":"a18c27f69aaa69ca059026257f3b3f8d2e7f98c8","sha256":"d12317a02bf0dc0ad7d8b86bf587ec9a475eb21f4041506e3884bd8bc32593ec","sha512":"6d1cb03d90c0609e9ac46dc448052fef7a78ea5a7b7a7143f61d899f18a4c30be27df59fbfcf698b1f5bb8bbeca065e594939c7711589784c22250f7a03fe18d","ssdeep":"768:PAbVYcdqfggXs3EPIHtucNbjW4Pv6MnTZh3bBVgPj82W3cq7cKch50sbWcWFwcfV:xfN83EPIH9GC6S1pbBiP/qouPGyfr","tlshash":"8f63a8d6680ad4e68d5524cdd437fc09e0688963ccadf053e62cedc5b81ef69a44b23b","first_seen":"2026-03-24T12:03:34.920424Z","last_seen":"2026-05-09T13:21:44.24829Z","times_seen":58,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_5.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_5.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-fcf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PB8tQ2LH9T1T8hwSyeCl6%2BAF3gdAguYQi9sqBig92hITH5z4ZDLWeivm28rMBSSk3SwYYNPlhZboL1cGkwZurQpGbC2sZ8Y3yTGaNeAbxeFw41%2FjmoBN7cdtVkIGwnUtTXHXg9iRpA%3D%3D\"}]}\r\ncf-ray: 9f460326b9f44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4047,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3c77e6983b606309345be3985e9f49b","sha1":"59085fbeb5820ebc330c90a5a1fd612d48957c63","sha256":"c43d13ac5cb4aa676c234213d28d76eec4f7ef2329591c20318b473f22757fa8","sha512":"b8484daf67a5ef64871ebb04740a9ebd701575ac1914b13dc8c4d548c900dcaa81a9edc8c3352cfb0188d94b8da3e1a89cf20d86c00614da68ac0c6ea1b48b61","ssdeep":"","tlshash":"d381cfd84f91d7a0bb5d6ee8982f1e2e3d6f28a77bcc4128c1b0594240218e76714fe7","first_seen":"2026-04-20T13:58:20.933826Z","last_seen":"2026-05-09T13:21:44.252187Z","times_seen":9,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_6.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_6.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-387\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zI09LptBjuvTHaYbNtXEJvCldRUvEmJiDXLN7%2BCJgqd8sHSTm4j%2F008Dsbd20OCIMi8KPMuZd73g%2B6G3DYk8g%2FSxKtKMGTDZovuk5ULDyXd75QMNmdMkpeY5DLcYjmY%2FIsCcQ4lydg%3D%3D\"}]}\r\ncf-ray: 9f460326b9f54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e17c295abbf48d16bd751cd0f19f31be","sha1":"147bec35aaef6b833cbb0f4598658f035d28e419","sha256":"1b1e5cdd8e37c2080bd53ad3df988d145229e04b29867ad18fe59325d6039e95","sha512":"47f1d2da90eae2236ee2d2c115c6da538374318f6e3c199f92a7f1b210c20904846ede7fc69feaeb60023ae4d4ea9f47a4ef67b34db460f0ff7b425ebc34bc93","ssdeep":"","tlshash":"c711c0f0374d13a4f1585785afaf98256d5b15b279cd008984087f17f148feb08b76d9","first_seen":"2026-04-20T13:58:20.955221Z","last_seen":"2026-05-09T13:21:44.25443Z","times_seen":9,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_7.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_7.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-484\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGUEZ%2BEvCZs8ex%2F1yZn9V9vGX7FIhOjS3ysUZU8mmOSV9rSSkpbxgTTKbQBKe4kW9ALHYXj3dSHRNJVHNWN%2BN4UUx91Vvb5SVtWHi1B9lgk7b%2F815fO8A7zbMxQgVF65HIXvZ1gPQw%3D%3D\"}]}\r\ncf-ray: 9f460326b9f64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b85e0d6702b0b419fc7189c91de05dda","sha1":"7a85716ba9ee380ed0da1a6a60543f5a43aaf832","sha256":"5a643e8c5d20334ceab3ec7ef49e111910f3a22a6e7ffe820217f04d5500a730","sha512":"9afe427cc496454a129c1607b07efaaede415cce726084179a4d24d24475997f5aa3e7eac34614cfe47c44730cd48104195379eaf62828fe97d2474872a698c1","ssdeep":"","tlshash":"8d21eef0370c9378f64383705b99656265baa1c307dc3600e3d06f655a540e91d7a7f9","first_seen":"2026-04-20T13:58:20.96446Z","last_seen":"2026-05-09T13:21:44.252772Z","times_seen":9,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/resource_icon_8.svg","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /resource_icon_8.svg HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69e91d25-779\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WyeOYlrORISmurzPUOcTFjDIqKOdW95M1GxIj3TXTuVTIOgReLb42DvxGp5337LTBRB%2F0sVHUVzPFx6zP0W44yWR12FUeKp1RQ6Me9Y3zLzyyhGUNU9nLwzH91gi%2FPViXM6kQgsPXw%3D%3D\"}]}\r\ncf-ray: 9f460326b9f94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1913,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0da97cb373cb1ea188d88d19ea7075eb","sha1":"7661b8321dc9069552f5dc626fb45a7ebaed9a53","sha256":"3a104af27030debc28e7aaaef093c464c61e2ffb52474ab79e751beb5e21fc2a","sha512":"2e949161aa4498339d967af28060a9067326bde5601e57d4a7558abfadb3a5901a058b7d168a707d340139ac0c0ff078ffc54363d30063a3e3c1c4bf46050923","ssdeep":"","tlshash":"964105c067bee4f03350aeb4f9653594e60d84fe3708405a46faddd6adf018a1844afb","first_seen":"2026-04-20T13:58:20.937651Z","last_seen":"2026-05-09T13:21:44.246345Z","times_seen":9,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/clean-money.png","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skyeco-votephase.com/","date":"2026-04-30T10:55:07.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET /clean-money.png HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skyeco-votephase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 89410\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\netag: \"69e91d25-15d42\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aOHy3mVd8cXQDDsDD%2BIK7ix5paXBSCMJG9%2FlD9zETSLXsXQVBnyjOLIdsaBQvUgriwbb8G28RIOSOASn9ejzfyUMWYtkdW%2BDp1sPgfPyRrN2foOzDPzNFxoay7k8AQuAL0OSxs8tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f460326b9fb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 315 x 231, 8-bit/color RGBA, non-interlaced","md5":"a261bb532e4a0c6fe87fce1ccf01fd68","sha1":"ddce3ca3801dcf26774a6ca5edffd2138086e154","sha256":"a95c046766c565b0332e4443b6f9f1be8454b171489bc6accfaa210a63edaa70","sha512":"ad3b3d88194e7e27450b151aa26bb3d7759f8beefcc9e630ee5e09434f9509bbe83a22ed80529d74d497bbb5063884f16365603f642bd2b0703106d907e37910","ssdeep":"1536:fgOZRgCrRP0bD/YygxKRAvSNgWXgtEJC3ujdW5SyZ0f0Dv:fbDgSRP0bD/YyIKRAY8EfjdDfSv","tlshash":"d19302867d47c9b224ace5ae0d23ecc942f521ef10e265d81394fa2554abd61d70f82f","first_seen":"2026-04-20T13:58:20.959438Z","last_seen":"2026-05-09T13:21:44.253848Z","times_seen":9,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skyeco-votephase.com/","fqdn":"skyeco-votephase.com","domain":"skyeco-votephase.com","tld":"com"},"ip":{"addr":"172.67.160.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:55:06.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skyeco-votephase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 18:15:13 GMT","end":"Tue, 21 Jul 2026 18:15:12 GMT"},"fingerprint":{"sha1":"CE:45:68:9D:F2:08:CC:C8:7D:44:23:F5:AC:41:24:01:5E:18:28:6E","sha256":"A2:55:A9:F3:F6:D9:74:86:E6:C8:09:6D:6A:76:C9:30:E0:66:AB:1F:A7:5E:D6:92:6C:DC:67:06:07:4B:63:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: skyeco-votephase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:55:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 22 Apr 2026 19:10:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Fz6n3IjqL9ajEGEjkuxeUei57OrltSwOrN8JA1n92vsx0%2Bb%2FlqKSTDvvKeM5rXsCNJpFQHF%2FstSiOUZ20du99WB6WDzAvjZWqU%2BSiCFy97i%2B%2BrAIEuINFVMQhMbC%2BG4pjyjrNuxmg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f4603241f4f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":531389,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (304)","md5":"65e9271702d0ac4ed3a04796fea8afb6","sha1":"4ba69eb2cd585391efdf24c8a252ad9e903e3b01","sha256":"db485523843252a967b41f359868710f721d5282df0cc64f84caa324b33992d1","sha512":"66a4abb0adf2f8660f206dfb55709823fb51c38c7a5f379a4f8bbcb0ea1cf995d3b97836cdd674088b5bb9983bd2cafe47aad498c2e916efc0e12343a3accdcb","ssdeep":"3072:4PKsmgsmePj7smgsmePj73mcfy1C8kD4htz:4Pw3mcfy1C8k+","tlshash":"32b4a3ad16f302a56c0ba4950be91b063770f463c60ae99c3dde1ad4cf4aed098d336d","first_seen":"2026-04-20T13:58:20.980458Z","last_seen":"2026-05-09T13:21:44.247123Z","times_seen":9,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":229,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"skyeco-votephase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}