{"report_id":"2cd4e1c5-1667-4673-8195-8aa6ca41dc9a","version":6,"status":"done","tags":[],"date":"2026-03-04T13:09:08Z","url":{"schema":"http","addr":"mvotehub.fun","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"172.67.138.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"title":"Vote to List — Powered by Moonshot","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mvotehub.fun","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"172.67.138.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:09:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mvotehub.fun","ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-04T13:09:09.976034Z","last_seen":"2026-03-04T13:09:09.976034Z","alert_count":6,"request_count":6,"received_data":5258248,"sent_data":2787,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53182466ddba072e5f6b8d0d9d655417","sha1":"e341cf575484a89d90092c574a1ce14b88ab0eab","sha256":"e0ade97da03808f7401f60d4b951ab082c52e18905d62bfca303e97a5da08b5b","sha512":"51b45218d568160f0cf2a51b920fd78266f8bbadb3332d84b242cbb9c1f7a31a6149e7f44ff96ad906f22020c559bf063b39164f036c8bdbc03b9506c5dea266","ssdeep":"","tlshash":"ef113826122632653c8eb0ee59b6dc4d7a7f100be90960a0b59ed08d7930b5544f76dc","size":957,"data":"","first_seen":"2023-03-07T13:09:46Z","last_seen":"2026-06-04T12:50:03.022623Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9a7a8117b199a065d1b82b126e29c29","sha1":"32289f986b7602da188f43224dd263896167e64c","sha256":"2ffa00850edb6b452512dd57c78e42ef0cf607c50f5c59679eb39b23bca8916a","sha512":"d8a86e2e0bf0506c6c6c01e4cb6d9401e53633e58c439133b8f49e61ec18a216d7fdb0a4e83992ac4180eaac48221f8e30d408917c8fdbeeb08722dc273c11d7","ssdeep":"96:DVs1G9gQKjrWxh9Gwzwz0/x3n7S6C2S8aF6x1+oCziSXtfxvNFY:DyAgQKjTwzwz0/x3n7S6C2S8e6xAoCzq","tlshash":"0db1be6fbabb4134ddab713b5bafa38477308003640ad1003e5c85529fe1fa505abec9","size":5280,"data":"","first_seen":"2026-03-04T13:09:13.284655Z","last_seen":"2026-03-11T01:44:51.117331Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"432e3ac4cd2060443a090c32118b76c1","sha1":"7cd2c1f376660d1538e93ca733d5383b2a363e45","sha256":"96f947bd1b50545f822a9232f9674eb9b938a52303a230a96c43852b8a9d84cf","sha512":"5d10f929f43d609561b06caa821babac30c41e23cebc05922973225f805f3b71d2c06d70c4db4ddbfa65836e648e99819c5cf280ad3218a0a916500ca7f88559","ssdeep":"192:xH45oLP/OQNjTTns5vm5JW249rXpyPf1pfurMrEWvhs0A2g25XTMgHy:xLZVjW9OpfXKo5gWy","tlshash":"3802821a7ae30835ace7213fabefa39879a484434849d4103d4cd5154fe0f616abfbe4","size":8330,"data":"","first_seen":"2026-03-04T13:09:13.291111Z","last_seen":"2026-03-11T01:44:51.118865Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"893fc64b7e1379e29e4b82d0105432c1","sha1":"9960d3439508b1d000f8a0613b3fba3913a44c68","sha256":"6a65d1b063a3fe42946be2bb4aa942e20568ffcacefcb2f64e494167633b038e","sha512":"99e433221635967121d101241c3b9394d615bc0d182504c66ad1f2c0917cc2d5eee2159f1e7546ba178eed6ea7d189dac9ad4340f59007d7325dd93b87ec07a1","ssdeep":"3072:RV8Y/Ytx9NgolPWx7uMC8rNtDwmyQKq+kCJJD3YOTikkQYvVsgyP:RViS6TotDwnQKR3YOTikKvVsp","tlshash":"52742d64149efaf78b915f98a62582c7d4482f380e013b2762f7ff92a1e574df0e6091","size":356837,"data":"","first_seen":"2026-02-06T22:38:09.255187Z","last_seen":"2026-06-26T13:22:33.72245Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/p2.slim.umd.js","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14705dd0279252d3457cf87f7b5252dd","sha1":"fd8b4043e6b08c2d2c37a4fb080368ca03a486b3","sha256":"23ce240cb55db91646ac4c5f8b4591a5c72756511b64fe426397e74dc65f5775","sha512":"22cb9dac15e7c9f601923ed8ef112ec70be234fc2cd8a1d8b62a0fe9a84df72bb1adc0f0cae6068c3e3c14e3609b38fe5f3679c53718c9d6c064793cc128fe9e","ssdeep":"6144:r/2hrEJqaZGVgQkZ2diu7NSOTiKiBf6Np:r2hYgaZGjkZ2diu7NmoD","tlshash":"82744e65109dfaf78b904f94a62541cbe4482b380e413b27a3f7ff96a1e5b4df0e6091","size":364080,"data":"","first_seen":"2026-02-06T22:38:09.234577Z","last_seen":"2026-06-26T13:22:33.708936Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29543828%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mvotehub.fun/secureproxy?e=ping_proxy","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mvotehub.fun/","date":"2026-03-04T13:08:44.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mvotehub.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 57983\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 03 Mar 2026 21:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYKavEqnKBXEtMPPWSJQqdL4%2BMtxQKh8CWOtVFTLwnDEOm%2FwPmznK5ij%2FZoQfUSfM4%2FXIqS%2FfomYIHeU98P%2FXYgthim8CGAU%2Ff6J7Q%3D%3D\"}]}\r\ncf-ray: 9d711c802f4ac8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-25T09:33:18.740865Z","times_seen":8958,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29543828%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mvotehub.fun/","date":"2026-03-04T13:08:44.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29543828%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mvotehub.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=shaka-player.compat.cjs.js\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/04/2026 13:08:44\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: b0edecb58219c0b95c87353ac0acffb9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckgd6sNPBC5EY%2FhDRtolYTJKlwAscDGKTBEZ34OVqFldw3N2Z%2BYPdOtVPnes5agjQs3EUC%2BUfmtjAbMNwGMdqsZ00aAYldvBm08msg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c819f7bc8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun//secureproxy?s=%2Fjmpd%2F","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mvotehub.fun/","date":"2026-03-04T13:08:45.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mvotehub.fun/\r\ncontent-type: application/json\r\nContent-Length: 2191\r\nOrigin: https://mvotehub.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2191,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:08:45 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1772629785497\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/04/2026 13:08:45\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 0479678f4b12bca2437fa5c109cbb9b4\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFFPIefDfXRY1LUkVEp2Pyq1UdceOBKzqvkGY8sjK3y9VVuwGkq%2FH09xnWUDV2ZH44bng%2Fw7V2qyYRr4xx%2FVupafLEBUHPZPHmqnLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c872858c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":495,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:08:43.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 03 Mar 2026 16:39:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdl8VRVPDDXBz5sS03xTWRAmqZl0iMJpo4P6HxFOwimoEBfcLl3u0FqWvSqh3zU1GNzVXwhI2Wm4PDY%2FQXTop%2BYcPgKWJwBC1cYkeQ%3D%3D\"}]}\r\nage: 57983\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711c7afacb8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2115375,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3601)","md5":"bf4f030b3c19b5e5734d0eaf3fbe99c5","sha1":"ade67763e6822759ddef108e157d30599450e37d","sha256":"52bd618b9f9e5eac377d70d7ef293ec566c1c58977691a687ed1202d4020df6f","sha512":"372e728b9b65f0b4f8213081635bf22d13d24ebd8c35608f71a5d029b3ff9f8425ecf3a97a5199dac6b7fdcc198a64137ef74956d67b77d42445abca20b361dd","ssdeep":"12288:jQugnoEBJnZ2MVVCfIcWL0bBGhEP8R6GWPDsdYENYuNlbUfxr8Z2L:aZ2CVNUCEdGms7GxQZ2L","tlshash":"ef25ce3664b295752e23b4b923ef614c7e35b087c90ddea87ecc2211cfc66b49d62748","first_seen":"2026-03-04T13:09:13.27926Z","last_seen":"2026-03-11T01:44:51.114225Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":94,"dns":61,"connect":8,"send":0,"wait":63,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/p2.slim.umd.js","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mvotehub.fun/","date":"2026-03-04T13:08:43.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"GET /p2.slim.umd.js HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mvotehub.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:08:43 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 03 Mar 2026 16:39:56 GMT\r\netag: W/\"69a70edc-58e30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 57983\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZYN1RvV5dXfgV4eiq76m5jZnNt2ClNpnpakx2h19XULtNhu3bGuoBHhLbzJiUFP2rN%2FibA1PZ7QI8w%2F%2BNojmc8TZJ%2FYt9gbIS8jyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d711c7d0ec1c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":364080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"14705dd0279252d3457cf87f7b5252dd","sha1":"fd8b4043e6b08c2d2c37a4fb080368ca03a486b3","sha256":"23ce240cb55db91646ac4c5f8b4591a5c72756511b64fe426397e74dc65f5775","sha512":"22cb9dac15e7c9f601923ed8ef112ec70be234fc2cd8a1d8b62a0fe9a84df72bb1adc0f0cae6068c3e3c14e3609b38fe5f3679c53718c9d6c064793cc128fe9e","ssdeep":"6144:r/2hrEJqaZGVgQkZ2diu7NSOTiKiBf6Np:r2hYgaZGjkZ2diu7NmoD","tlshash":"82744e65109dfaf78b904f94a62541cbe4482b380e413b27a3f7ff96a1e5b4df0e6091","first_seen":"2026-02-06T22:38:09.234577Z","last_seen":"2026-06-26T13:22:33.708936Z","times_seen":111,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mvotehub.fun/","fqdn":"mvotehub.fun","domain":"mvotehub.fun","tld":"fun"},"ip":{"addr":"104.21.38.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mvotehub.fun/","date":"2026-03-04T13:08:43.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mvotehub.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 00:25:40 GMT","end":"Mon, 01 Jun 2026 00:25:39 GMT"},"fingerprint":{"sha1":"E2:F8:17:95:88:6C:08:71:75:7A:52:11:D9:0E:F7:A8:0C:5A:8E:85","sha256":"0A:CD:B1:9B:87:4E:86:94:91:30:74:9E:80:96:51:BF:4E:D4:4B:08:04:60:EB:B2:CF:94:85:8A:6A:E5:E1:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mvotehub.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mvotehub.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:08:43 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 03 Mar 2026 16:39:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 57984\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knKjLyzcwqU70bV3UhWJOnqHfH8v6auNLDFLeSQPK8ojKmfvOLwn7Q1SaskgsC9ghHFAjIlhX5Q1ArXyii7qgXsMR7Bs%2BuNfqfOXYQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d711c7d0ec2c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2115375,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3601)","md5":"bf4f030b3c19b5e5734d0eaf3fbe99c5","sha1":"ade67763e6822759ddef108e157d30599450e37d","sha256":"52bd618b9f9e5eac377d70d7ef293ec566c1c58977691a687ed1202d4020df6f","sha512":"372e728b9b65f0b4f8213081635bf22d13d24ebd8c35608f71a5d029b3ff9f8425ecf3a97a5199dac6b7fdcc198a64137ef74956d67b77d42445abca20b361dd","ssdeep":"12288:jQugnoEBJnZ2MVVCfIcWL0bBGhEP8R6GWPDsdYENYuNlbUfxr8Z2L:aZ2CVNUCEdGms7GxQZ2L","tlshash":"ef25ce3664b295752e23b4b923ef614c7e35b087c90ddea87ecc2211cfc66b49d62748","first_seen":"2026-03-04T13:09:13.27926Z","last_seen":"2026-03-11T01:44:51.114225Z","times_seen":4,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mvotehub.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
