{"report_id":"43314741-6d77-408b-a039-dc5729734f2b","version":0,"status":"done","tags":[],"date":"2026-06-08T14:53:06Z","url":{"schema":"http","addr":"onyx-votes.xyz","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onyx-votes.xyz/","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"title":"Onyx - XCN Ledger Blockchain","dom":{"size":16031935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"62bca1fa3f258d6989ac77e1e95f5f17","sha1":"f3c7eb4f88b4e351b9210f31253c7207866a7522","sha256":"f3fd608f73f97c37d61f2867a190ef53234bfcaec8c34116717f82fe33e42a78","sha512":"f8b6a40fa32618ea85eb0281912f76e811f2aa561eed7b7b8d5a52badb0e5faf787110e220f33039d3d67d586896084fe5a76850907b0ebccb8bb1f2491ae529","ssdeep":"49152:VsXh17GiyoshguZ8vvZ8vkwl0WMzXExysx7UveXta30vx7UveXta301yM40PnHak:f","tlshash":"08f6f8b0027606edfdcf8a8fa97a7e463dc4709fbbf40588d32b856756a54d3b418a10","dom_hash":"domhash1c191d2921dce7d5ce918a3bca5128f5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onyx-votes.xyz","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T14:53:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"dns.google","ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-06-05T11:56:36.149108Z","alert_count":0,"request_count":1,"received_data":819,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"onyx-votes.xyz","ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-07","domain_rank":0,"first_seen":"2026-06-08T14:53:06.958757Z","last_seen":"2026-06-08T14:53:06.958757Z","alert_count":0,"request_count":2,"received_data":16450023,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onyx-votes.xyz/assets/validator-pilot.js","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89406e61d7728999d21cc1b8587efb12","sha1":"e36558732aa22b4c14f6b20bae3ad5df818ff37a","sha256":"594056860c8789fb88a53c2b6afaf8d3f6eacc7bd21fdde2795e58d755d090a1","sha512":"a3659aab575c2be9f67c6abc4394f575bb1d524444f74280785edd468ce5a67d51f01c7bde2810c8f8f9054a4f4f71269ea2c626825cc1e9028fb9a89b856e3c","ssdeep":"6144:alLUKf41N52Djc+kwsmhTDnG1Y6/59+lpynijyvjy:mj41NsDEuhXG9/H+lv","tlshash":"989418893bf80a34952743afbe2bd523a17742074a2f6325a530fc4db77e1819fd0969","size":415533,"data":"","first_seen":"2026-06-08T14:47:59.476669Z","last_seen":"2026-06-08T14:58:42.358311Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-votes.xyz/","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"876569d4e649eb2f74f701b3087e5581","sha1":"2569d9470b3ba6117c094d1598825ccdbf49aea5","sha256":"824e65767aacb31ba856c8d87a54b8ab8bc016d4e10da16bc75d6a9f1d462742","sha512":"4eaa051811efaffbedbd15758591a65cbacc24324e20af45645c8bc8743bd67d1f01dc6572127b3b6966461ed61b740e6fe56418071d16bf02a1029d7fa0f661","ssdeep":"","tlshash":"64f0c82df2245b337cbdc47f647366df3eb3612dd2052460245bad0935b4d41aae4e05","size":638,"data":"","first_seen":"2024-08-25T23:33:17Z","last_seen":"2026-07-23T00:51:15.366979Z","times_seen":728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-votes.xyz/","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8f68d3bd78100cd0a1b085770e7c078d","sha1":"9e534528fd6ff39de6e49b69157db6cd27fc61d7","sha256":"9c3a971dbcff379fd4d89fd7262aec27a058ae03317be02ac586ed50c2fe8b13","sha512":"168e004fa4a4e333e5946df8dd64c10435d04e9a7cb3f3734b18afca7d8f1b6c439ddacff41a94711e1f08fe6d1ca676e1ed5288716cb621a218e29f8e53b9fa","ssdeep":"6144:96BBmVQL4/04oI+Vos+P9xjIHMoFPO40lTynijyvj8:0qQL4s4YuP/IlFn0l9","tlshash":"e39417893bf80a35952743afbe6bd123a17742074a2f6314a530fc4db77e2819fd0969","size":412707,"data":"","first_seen":"2026-06-08T14:47:59.484527Z","last_seen":"2026-06-08T14:58:42.362326Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dns.google/resolve?name=wan-milkshake.mom\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onyx-votes.xyz/","date":"2026-06-08T14:52:38.379Z","timestamp":1780930358379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:38:13 GMT","end":"Mon, 10 Aug 2026 18:38:12 GMT"},"fingerprint":{"sha1":"30:AB:10:C7:AF:87:92:8A:4E:FD:78:4F:45:1B:C7:01:D9:7C:D4:90","sha256":"F5:39:DC:4D:EA:D8:09:93:0D:99:66:2D:28:C0:D1:CC:04:6C:71:D4:49:9C:72:55:0E:BB:F0:E6:CC:B6:22:CC"}}},"request":{"raw":"GET /resolve?name=wan-milkshake.mom\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://onyx-votes.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Mon, 08 Jun 2026 14:52:38 GMT\r\nexpires: Mon, 08 Jun 2026 14:52:38 GMT\r\ncache-control: private, max-age=900\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 223\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302,"size_decoded":740,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0595510c8f43ec75bf64038c8c979848","sha1":"93a589fdf075a1f173fae41eb458820cd5ebd211","sha256":"3eb0eab40fa8f999a9b6a30afb76fb3243a1e9e2d193c06135e51deb471fa4ec","sha512":"1b42d7584cbb51789c01a9a54a380383265362b870302c713cdaf6c91313799623d4b4617ce24e6ee972fe5bce8128c16a72a60a8ddf18d91b54d898d05d7c32","ssdeep":"","tlshash":"33e07d15c470c1f4aa1030cd069b256fed945612f44c0cd7898e1d50f126191b083807","first_seen":"2026-06-08T14:53:11.351102Z","last_seen":"2026-06-08T14:54:32.226713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":43,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-votes.xyz/assets/validator-pilot.js","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onyx-votes.xyz/","date":"2026-06-08T14:52:35.692Z","timestamp":1780930355692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-votes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 15:42:32 GMT","end":"Sat, 05 Sep 2026 16:41:11 GMT"},"fingerprint":{"sha1":"BF:C3:CF:1B:F7:0E:BC:5A:C5:2B:E8:A1:04:A0:D5:86:BD:F9:50:DB","sha256":"57:8F:F4:31:06:60:22:72:14:1C:E2:3F:16:60:A8:D6:9F:EC:BF:2F:16:AA:16:54:2E:CA:AE:02:CE:04:AF:F7"}}},"request":{"raw":"GET /assets/validator-pilot.js HTTP/1.1\r\nHost: onyx-votes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68pvlP7N%2BQ3%2FfZZF0cf69HfUW6iD%2FB3dum0hJGLFMXTDf%2BKIQ1%2FvcO066aX7%2BsIZgoPMeTKpqGKGiN9BKZbwTmeswGFAvH7oVYy%2FQbJha600l5eA3%2BxyiX1PK%2FcRJUKhtA%3D%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 16:50:07 GMT\r\ndate: Mon, 08 Jun 2026 14:52:35 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"61c318ea5c959ce4ebdb47ddcdc2bc11\"\r\npriority: u=3,i=?0\r\ncf-ray: a088b8a31eaa0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415823,"size_decoded":170509,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16866), with NEL line terminators","md5":"89406e61d7728999d21cc1b8587efb12","sha1":"e36558732aa22b4c14f6b20bae3ad5df818ff37a","sha256":"594056860c8789fb88a53c2b6afaf8d3f6eacc7bd21fdde2795e58d755d090a1","sha512":"a3659aab575c2be9f67c6abc4394f575bb1d524444f74280785edd468ce5a67d51f01c7bde2810c8f8f9054a4f4f71269ea2c626825cc1e9028fb9a89b856e3c","ssdeep":"6144:alLUKf41N52Djc+kwsmhTDnG1Y6/59+lpynijyvjy:mj41NsDEuhXG9/H+lv","tlshash":"989418893bf80a34952743afbe2bd523a17742074a2f6325a530fc4db77e1819fd0969","first_seen":"2026-06-08T14:47:59.476669Z","last_seen":"2026-06-08T14:58:42.358311Z","times_seen":5,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onyx-votes.xyz/","fqdn":"onyx-votes.xyz","domain":"onyx-votes.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T14:52:34.829Z","timestamp":1780930354829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onyx-votes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 15:42:32 GMT","end":"Sat, 05 Sep 2026 16:41:11 GMT"},"fingerprint":{"sha1":"BF:C3:CF:1B:F7:0E:BC:5A:C5:2B:E8:A1:04:A0:D5:86:BD:F9:50:DB","sha256":"57:8F:F4:31:06:60:22:72:14:1C:E2:3F:16:60:A8:D6:9F:EC:BF:2F:16:AA:16:54:2E:CA:AE:02:CE:04:AF:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onyx-votes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Sun, 07 Jun 2026 16:50:12 GMT\r\ndate: Mon, 08 Jun 2026 14:52:35 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FckkVOqp3n0fr4Ew400qWUwLjiwsq17SVQP%2FByGZb7nM5yXb0CYCMs5DotDf1rOzXA%2BNJ%2FYfWPIXAioUI1sJOYQstav9et25uejBaCLQPaoo4SUSQ2EBJljuHJ0Rxgcp%2Bg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a088b89e1d4e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16032836,"size_decoded":4621231,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"59203191f3c49ba2fe305bb5903f2404","sha1":"e814946420c8253f3843cecd4637eeca572bd7ce","sha256":"efd2b1cfead0ec9589b690f0e33c8d698133b99547915e366dd7ad3009e36b4e","sha512":"02a9fb5f9c54c0f205fd5f37735cda65843e998e31a40973c9bd96bb0057d136d851f59ce5a73ac1e067fc9836013d2c7af602feeea80b4774cf789fa7cf09f9","ssdeep":"24576:Ys9KNc3yO1a1T6O7PSfRlFEComPmiCvJpmcH:YsXh17GiyoY","tlshash":"3925d0f1a053fda32af80d40a01d3f601c2c1cf75a25b568e84d6d5562e9ca8fe5dabc","first_seen":"2026-06-08T14:53:11.352772Z","last_seen":"2026-06-08T14:53:11.352772Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2667,"timings":{"blocked":-1,"dns":42,"connect":17,"send":0,"wait":202,"receive":2406,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}