{"report_id":"5a00025c-c940-492f-95cf-12517bc518fd","version":6,"status":"done","tags":[],"date":"2026-05-23T13:15:58Z","url":{"schema":"https","addr":"vote-worldcupcoin.com","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"172.67.193.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vote-worldcupcoin.com/","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"title":"World Cup Coins","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-12T06:40:17.747875Z","times_seen":1037327,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vote-worldcupcoin.com","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"172.67.193.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T13:15:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vote-worldcupcoin.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-21","domain_rank":0,"first_seen":"2026-05-23T13:15:58.772914Z","last_seen":"2026-05-23T13:15:58.772914Z","alert_count":12,"request_count":12,"received_data":1016144,"sent_data":5481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":4,"received_data":113429,"sent_data":2185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-05-21T18:47:39.225924Z","alert_count":0,"request_count":3,"received_data":4127,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":4930,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vote-worldcupcoin.com/","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db6d2372fb95c9ad4fc8cc45919555b2","sha1":"025667fa89f67724401759dea82cdc7be5f496e3","sha256":"4e26ffec655711245ef9f550e8d1b568941223dacdf273ebcec86eb1c22a968d","sha512":"2b29233154cf8d607208ccacb2e7c13d3088e6f7f1dab9279815ff95070335ec7630e610eda63bdc7317d00ecc3ad864840057e856204b17da3572c0983a4e8e","ssdeep":"","tlshash":"f3c08095d5718de0091c00fa71b5539476d06dae418174dbc7bdedcd64dce815dcc814","size":186,"data":"","first_seen":"2026-05-23T13:16:02.244121Z","last_seen":"2026-05-23T13:16:02.244121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/secureproxy?s=%2Fipfs%2F2WqMHEYODBFF8ZEz8Qns4g8a879f857d8eb665f4bcd77c0c6cdddd%3Ft%3D1779542135464","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47b144eeffae2d811dcfcf8a2e5988ae","sha1":"e012225604e9553d2fe0d4129415aa1221b3cd17","sha256":"9de4529c10fe02bb8cee96e7485fa303ea7c8350c5cc81363e48c6309a10c2da","sha512":"6f6a762366169b69be7dbc431841b67f44c09ca8a635f9134be32417e12ea1dd8e12757f26eadb7606fc041da41de3dd16726e3e5fd510320a7134e755fe3ad7","ssdeep":"6144:rh5gDsimdV6bIK1GzE2nT36RzaILAzrryoMo2w64HollUz7rBdBQo7oSYbwI4LQO:zssimmbNgTqmIMz6oD","tlshash":"7bd4c6ea834e9777e08a22f71673447fefaa2d18856feae057c0ddd953c8b0214e4158","size":602546,"data":"","first_seen":"2026-05-23T13:16:02.227018Z","last_seen":"2026-05-23T13:16:02.227018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9648645ee240d55ccec9f3fa62ca6de6","sha1":"075e01fff9f1d45436be786ed45bafbfde9ce21f","sha256":"0cb3c523cddcccbc6f013319c3e520ac2cd26596b0d1f49144c7e1268905bd94","sha512":"156ce0460ef670e22b9bca979bdf48b214ac78b9c51cd585ab5112c48532eb275bbe7728abd5fe28847c6d0d187f259c608c491d139c9f618d6f6a62c4a8f016","ssdeep":"96:j4Vfs4sNs7+s3sUOSsvfsQsZsBsmiAscsUQIcsEzs4sYsssGsqsPsPshs8sxNsuV:jgfs4sNs7+s3sUOSsvfsQsZsBsmiAscS","tlshash":"3fa18f5bf5b20cfc0aab646e0faf1b857134a803d945552a7f1c83d96facd48f435268","size":4767,"data":"","first_seen":"2026-05-23T13:16:02.249564Z","last_seen":"2026-05-23T13:16:02.249564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vote-worldcupcoin.com/app.js","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvl%2FzRq7UeF7gRq45Vo4cxcUlpq5HXeI361%2BBNuENKy5PEYduWTD2BjvigbW0BAUH14y0qmxArN2yo%2BVnBUsw1FGv%2FDUZRURmY%2BDfrE%2BUVkKaplq9lhBskfAmMITaYVqrz%2Bp7DUFiyg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548dbc45783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:15:35.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RofMbsO8D%2Bh%2Fc%2FI5zk2Rb%2BcfLYd6sQu4mSZbz1o2pLcKDPQPEFpjq%2BR0ICmJiPEX3C7OTAwZNdgA25rpifCeYKM5cJH3fWm%2BytmiemTMlEPC8N94RanB21PFiRewkc6TLsNAsSv7u3Q%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a00454888836a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187726,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (472), with CRLF line terminators","md5":"f7e422d608aa34d2e624880c5fa1357f","sha1":"91cbd24dd45c6b9396610996fdbca89b93c3cf0c","sha256":"0eda024b22b0ab8cc70a83ea8459cd0bab999fc9cc32daf491e2795df2bfe11f","sha512":"bff0e9e46b8f9c4cee1fa1a52603e776a45078a4733ed7a31431d6584b06ed715832136a915ea0447161fb6afe9c2a42dc928fb864e7c77111505d173f26745d","ssdeep":"1536:rHDnQxu9CBNDDkGlwuu8/6/pY6Qyg71OM3bc26xuVY/SlNKd5s3IsCevjZvpIIq1:L5xuX4kHC","tlshash":"b5048bb084c16136027740e94769ab5afdc2c53bcb4a4265f2ee279a8ff6c91ff4b015","first_seen":"2026-05-23T13:16:02.210456Z","last_seen":"2026-05-23T13:16:02.210456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":50,"dns":29,"connect":1,"send":0,"wait":189,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/schedule.js","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /schedule.js HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xizp6oe494UlHn4ILN3ncYWamJk%2F7%2BFIqMlOEtR6pXTyiKns%2FIdI3SNB21JaFH56EyZurdSblJN%2BnM4VVNl2jWJvMMndxUpr5PNyhWzxcBs8jTVajPh7ValXalwl7j85tMss2tFOXAk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548aca86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/app.js","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2F%2BZ51cTwo2utcEVaP%2BXGjvBPM0W8Y2itoQqK%2BnPLYMNXJRBbKkEWeG6klSEcrig9nJP%2Bu%2BXyWmXuA6A8quIktwSoqRMo34SzSZR%2BYl48r3OSxuqunSLu069%2FE6KotKnlsG7LEw%2FajI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548aca8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vote-worldcupcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 02:12:43 GMT\r\nexpires: Sun, 23 May 2027 02:12:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 39772\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-12T06:38:14.440801Z","times_seen":29050,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w80/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 673\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 973469\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWxSRTcgkdZGg%2FMOeyVbQbDuCrDzwD2ix57cWBEy%2BpTMPxn82id3eYYDs0j57%2FLFDvcXs4j9%2FamaSuGrgEfl2vUGN%2Fn%2FUoJ7aaIWZOFP0M4mPi7qVZR%2FVrb58TKPAg%3D%3D\"}]}\r\ncf-ray: a004548dd85d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"6d6e4a20a2b14d5b9feea78ad9800c86","sha1":"0af8f4cb318ca66ae6711efc0bf4fe4933a41b8e","sha256":"cfd46911c2d8a218317ecfa94d776ca3784def0212332b2c230d0a7cfeb6be41","sha512":"f21452b25f2b99a956eb9014f9413f20325f03841fd3c37383d7823fed7cb4e038d0f77b8faf46961e8636a03575489eb37bad1cc33fc7f99284e42a94438170","ssdeep":"","tlshash":"b601f4d793ecbf3880bcc4678a6866728af18174c252425abc5a54531813b61d18a6e5","first_seen":"2025-08-29T01:16:58.565493Z","last_seen":"2026-08-10T14:12:39.348365Z","times_seen":277,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":71,"dns":28,"connect":1,"send":0,"wait":5,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Outfit:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Outfit:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 13:15:35 GMT\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4244,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"98d12ce098b0a6b756f036baaced668d","sha1":"807d03377a4ca44016772e3d464dbf32aed3e6c4","sha256":"e2ec2d94239479afa3586c49bf074d48230d0ca2c6cbd25df35b2c29af44452d","sha512":"b0fa8015c2159954af34d87944375d1e2670ae48ead37cbaa2876caaa0aa0ec4c89d9cd4b3eac77e0a9a3376da1dc77eff55702791dc2543cdb08d459942e39e","ssdeep":"96:1OEa9Jc+upOEaKNNOEaRJc+uwOEaKNNOxMaRJc+uwOxMaKNNOpaRJc+uwOpaKNNT:K1/Nh6rhwEhXxhWV","tlshash":"8b91dea1082ba144df970dc222ce7e33ef1f62516444d934affe1898bc6bd6a935670d","first_seen":"2026-05-23T13:16:02.218274Z","last_seen":"2026-05-23T13:16:02.218274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":79,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/app-config.js","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /app-config.js HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BSNcXBp5ezEA%2BgMUZjEyZESVRL6Mii0ZXVgK4lWZn5Jb9aWrwFzpR73J%2BmYD363tMZeLlxLBgUUE%2BTb5RRIFJ%2BLMIz4wqsrF4wIchnXxQdK6s7i8XyFgGiqdHaxv8HvKC%2BuHDawIus%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548aca85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vote-worldcupcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 02:12:43 GMT\r\nexpires: Sun, 23 May 2027 02:12:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 39772\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-12T06:38:14.440801Z","times_seen":29050,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":168,"dns":1,"connect":21,"send":0,"wait":8,"receive":2,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/favicon.svg","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:36.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8%2F%2F%2F3WHANbTrBNSAzBKnZ%2F%2F7BZ9p8wU6ZrQ9dBOhsDRF3FfUPqVXYmOOZcg%2FYE2gnA%2FtcQBcwutv8y36xw%2FZTrrK4TIOdyGk6WVMhS1F4YYSscidU%2FdP5pFLQVXz9zZ3Cd0S%2F7%2BQf8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548f6aa0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187726,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (472), with CRLF line terminators","md5":"f7e422d608aa34d2e624880c5fa1357f","sha1":"91cbd24dd45c6b9396610996fdbca89b93c3cf0c","sha256":"0eda024b22b0ab8cc70a83ea8459cd0bab999fc9cc32daf491e2795df2bfe11f","sha512":"bff0e9e46b8f9c4cee1fa1a52603e776a45078a4733ed7a31431d6584b06ed715832136a915ea0447161fb6afe9c2a42dc928fb864e7c77111505d173f26745d","ssdeep":"1536:rHDnQxu9CBNDDkGlwuu8/6/pY6Qyg71OM3bc26xuVY/SlNKd5s3IsCevjZvpIIq1:L5xuX4kHC","tlshash":"b5048bb084c16136027740e94769ab5afdc2c53bcb4a4265f2ee279a8ff6c91ff4b015","first_seen":"2026-05-23T13:16:02.210456Z","last_seen":"2026-05-23T13:16:02.210456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/bg-stadium.svg","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /bg-stadium.svg HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cykQfOKVdAfvvgFJB7qx68h4Rhe9eDN5AYHwpDuDVMVu%2BuQleEsTnp%2B%2BBhyvDwRWJovPlc1Fvp%2BhmHZaJ1aJiEdRWEIuOu%2FlPbAWp5TPDTkiXh2%2F9oRgdbMX3zCR1aJo4ITrGLOBz7I%3D\"}]}\r\netag: W/\"6a0f6276-a18\"\r\ncontent-encoding: br\r\ncf-ray: a004548bfe49783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d2ac03dc51a123876c0d820c348ce95","sha1":"827303805fbe739d814f53419403d19b0261e50a","sha256":"7b07fc5d5ca4588ca012624487ba5ede5c7b3bb0f2c8654e544dfb6292106608","sha512":"86480dd5ab7c5ef5f9667eb2f9164b9b35d5fb1b2df35eac183cd1f53610b80ef128b51ce1a9706b68c9532eeacebb263d16f73520bc15fb6124e76a83c936ec","ssdeep":"","tlshash":"71518569939c1839ea05824def55f1742327a1c7875862c17c0eaf796b0098f9d7b2e8","first_seen":"2026-05-20T10:38:09.332825Z","last_seen":"2026-05-23T13:16:02.221231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vote-worldcupcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 02:12:43 GMT\r\nexpires: Sun, 23 May 2027 02:12:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 39772\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-12T06:38:14.440801Z","times_seen":29050,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":50,"dns":1,"connect":7,"send":0,"wait":11,"receive":8,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/secureproxy?s=%2Fjmpd%2F","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:37.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-worldcupcoin.com/\r\ncontent-type: application/json\r\nContent-Length: 1428\r\nOrigin: https://vote-worldcupcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1428,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBtQLYAisAFwAjA-8CIwD4AhQAAQIANwMAAO8nhn2XtsKCAR7SKlg6vWKGoBTGNWwCAADX9D6GLkJt4zKCZyHWSjrp0Wf0-ZQ8db8XhnsBjt1P9rsqKyvmQ8LIca_Nwyil0ovl3PJbOBw7Fj2TlZZkMZWRTpK96iFd66QgGesmMW02p3BWL0IJ4UxW2falaldgOToPh0FAlReubciu2txK9PRDX23LwvwQE_ICkppObv_oxLnlaT_DOQRLPvhZQKPht4DBhZ-4RSfYvRya7ORsfqcE5nU34SZqwTSPRw5QgHKvHNLTsCmXEfGOYGh75ddgNNyBiaF7_b_qlC39byhsIJctP3t68s16l62G-sXmFSWoX6fyzP1d43d7ioBABtTesBfKr_-WshRYdEiDLAbbyF6nYwvjL6pwNSWaWzTAYUQpPFX_82WxG7fJE9gXu9tygoDpya0lu1LwJEgXMs_o3pRywezcSZd6Qmi-C8vuwNCe7_ImZH2m03PeLgBXv1asG0opemtyorK-bWb-8dR88TE3t5kSpDqKbMDLMzESyRMMRG5kBmoSSCG4QWnt-_ZSylOLOkt01YLtcGyyGf849edzHc-vX_ZUB5MctZ18VsBfRiMSBp0paFHU7fzim1v1X2DhB391ZDSVKeN4qa6_O6-cq7w_shWUT_gOoa0IzTDNJv75UJPWQYzX0rl3ZmMb9XVXw7yA8Ch8jU0dxK_pGDoUj2PaSqf259ktQPVqz4MbY6A_D528hqeYRmewNxs4NTcFOVp6uHOHSzDH2rp12AxJuAytkM4KrX9WcqN8wLQ8REASKcImdAsGzqIXJKQCS2s00moGyV6WHmt5qDIf9J6HYhZpgGCJOS_8jsrJ71nExvze426EI665_gvDMYbYHzMnogeuMETjgc_6ioU_hQLjD33OKWT_FNEQ4qAZkg0xrN0M8kGoyK07mrQf9Vfp0O4zCDsjk23oW1kD9hu4a9wiSIDILqUCv_73GNy8KJsDd3__BzXbYsthrvRfLiKsTciGUlwdQMgSTtFQR-F3ePSEOxjVuILkNLGBl4ktldVNW2a4H7Y1Y1dDi_QDhiru52baAxFcF7-PW7nlrIfW_6Bp8UAuY2UvasVqAterdlohYlSErkMhBVYQQvMAuol-UIMGAY_hhLSyhnPAThXhZuVQnaMBvtmFtekt9I09m3QQ\",\"challenge\":\"eyJpZCI6IjlKSDZEemFPTHFKS3pPSzZBaTNWcEEiLCJub25jZSI6MTAyLCJoYXNoIjoiMDAxM2ZiNzI2YmFhOGM5ZmYxOWU3YzY0ODFmMDViNGE4MmU3NWUxZTRhZTQxZWRhOWYwYTFhZGVmOTk2YjY1MiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 23 May 2026 13:15:38 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1779542197803\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/23/2026 13:15:38\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 1cd23fc9bb2dd42f9b1e31da15385e5c\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhSahZrkvkMleQUvbC7U1EhaCYGkOAg050%2BLUj0FgYSsqI5%2BsoLhnZjTazIZblOLSPR3n10sYPgh%2BUhaM2dqRn5b0AI5YsbDLPtgqyztYUXVzQV1SsWi1K66kSxsfze19UcswIAMuQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a00454981e73783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/styles.css","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\netag: W/\"6a0f6276-5742\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvRd5QBCTKV6ElPAl%2FX9s94V1B9gDmdKT13LhdTzeJn7%2BmF5CN3JyDCNURTBLcsaUej8%2BPCVcDtG5juM08tqdqyoGgE4yfgq9jobxGvk0OqyBmOWL6K%2FdOLkjxUBT3rdT2pPwITxVMQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a004548aca83783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"964b67576e12296cb7af34972a6ce569","sha1":"9e83a00938c6001e98008c39afc93fd2e61274c8","sha256":"570ec366a5352684293f739e6fe8a6c7e1499fd868b9e9a0fec37ac42e7d7302","sha512":"d53cd4dfc59668d88d40bf1fb7fc8536e8cfb12bd2416784293a6e7e3270be1ea6cebcf3f2478c5e7c5a34ec4a00007b91de538c49268e386025ee04511c2045","ssdeep":"192:zag219UgNIVX8L+mDZt+CJFTsZbDmJtLtRc5R+yoojyPemnIuLTEkY6AFUBP8Y/S:I9qi9sA63y3EkjC","tlshash":"22a2329dda461204b537caa4fb93db5bbbd981158607432dbff61008bb8e09dc774b88","first_seen":"2026-05-23T13:16:02.22415Z","last_seen":"2026-05-23T13:16:02.22415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/secureproxy?s=%2Fipfs%2F2WqMHEYODBFF8ZEz8Qns4g8a879f857d8eb665f4bcd77c0c6cdddd%3Ft%3D1779542135464","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F2WqMHEYODBFF8ZEz8Qns4g8a879f857d8eb665f4bcd77c0c6cdddd%3Ft%3D1779542135464 HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"931b2-4BIiVgTpVT0v4NQSlBWqEiGzzRc\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=2togc7iVn0xNe_91BF6oVw.js\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/23/2026 13:15:36\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 0cd31b239a148619b94a2e5cd1a0af29\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVmgLyOsiQruG7G%2BPIevC3AFyPezIJuAhj2BthG1ovWpCXCvIo5I3K2FYh7akh%2B0tNJzHewk%2FkrzGs0r0yFilLeU3l6soguABojd7dSAM9%2BT8aYHFLpihhh1ucbuXwY464KSOv9d2XE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a004548aca94783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602546,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"47b144eeffae2d811dcfcf8a2e5988ae","sha1":"e012225604e9553d2fe0d4129415aa1221b3cd17","sha256":"9de4529c10fe02bb8cee96e7485fa303ea7c8350c5cc81363e48c6309a10c2da","sha512":"6f6a762366169b69be7dbc431841b67f44c09ca8a635f9134be32417e12ea1dd8e12757f26eadb7606fc041da41de3dd16726e3e5fd510320a7134e755fe3ad7","ssdeep":"6144:rh5gDsimdV6bIK1GzE2nT36RzaILAzrryoMo2w64HollUz7rBdBQo7oSYbwI4LQO:zssimmbNgTqmIMz6oD","tlshash":"7bd4c6ea834e9777e08a22f71673447fefaa2d18856feae057c0ddd953c8b0214e4158","first_seen":"2026-05-23T13:16:02.227018Z","last_seen":"2026-05-23T13:16:02.227018Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1123,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/bg-trophy.svg","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /bg-trophy.svg HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxyo7AVD8gsGD2lGJtEzWTwCgMILzwoL0YHV5VNDjMXoZZd2kYCCUnUIAA9rxoN2go5TS3EHcqg6aME9o7%2BT9baD4reu39mI0aXwRb0Xlm6O2S9f1GjwlSAYA7p5DbJvv5gFiI4gEFU%3D\"}]}\r\netag: W/\"6a0f6276-3e0\"\r\ncontent-encoding: br\r\ncf-ray: a004548bfe64783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":992,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8067051facd92fd4cadcde4232b95ebf","sha1":"a7850dba5d95ac2e9d2b38821ddf24514c0bc7ed","sha256":"a87350bbea5c87f594f32a06e00f65117428a085c99560bb37e79d2430259391","sha512":"c75ef88a85054941e00d6d063d3578d9b71a44225660a7a4b641119ae5f4b506ed28df8f66a05287da047c198c0c44a2901b17ab6237d4419b724162dc334b5c","ssdeep":"","tlshash":"d511ba28a1b8586d884ec38cda5de0a82539c0c3126491e57e1e2faf0b019d3de5b3d8","first_seen":"2026-05-20T10:38:09.331929Z","last_seen":"2026-05-23T13:16:02.229962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vote-worldcupcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:04:20 GMT\r\nexpires: Sun, 16 May 2027 15:04:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 598275\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-08-12T00:14:58.690922Z","times_seen":12377,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":74,"dns":2,"connect":21,"send":0,"wait":10,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w80/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 123\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 820339\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKe%2FbPoVyeMfRDyZViaiGgYWEH4WJkOM04fZfPFncm930SUyVLmE6GqBPAmOv%2FKdZCQtHTKff98wZQG3%2Fxv4kaaW6lOfEQ1JgdULRCS2YekSmYy0w2fZQa97q%2FXLpg%3D%3D\"}]}\r\ncf-ray: a004548dc85c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"ea88236cab2242c37f12aa634aabff00","sha1":"194907b10fcf3475dae7ad48d759863f3350f96f","sha256":"2a539c1a42f160aab68730f4caaa322bd6fbccf42145015bb7544961671a9cbd","sha512":"9f00ed6a3341648976dc1e0d3b898fd0b29ae373cc10d67c6e27523ff0de0cd8c0f51eeb186c900acb86c5fd1205640e0f728511de379a14d397902d8d262302","ssdeep":"","tlshash":"c4b012f3625cfe29efcee96b45d89694b8791378639066d71c8b917d1300230d448153","first_seen":"2025-08-29T01:16:58.596905Z","last_seen":"2026-08-10T14:12:39.317243Z","times_seen":296,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":70,"dns":25,"connect":1,"send":0,"wait":6,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w80/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 893\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-37d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 889207\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBlzgeVz7jqH9PNbsH56zNy2s%2BO1FyG81UvU8MlTJuSmqjTHF6RVkRSWoL5tOiFVwvJ%2FfcBf3k01yAXZLWfYEzJ1gK3Y%2BF3GVyPobZlu96AU0fqguXo868v%2BGMpSnA%3D%3D\"}]}\r\ncf-ray: a004548dc85a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"f271c4cf14ad3929231032902b6d384b","sha1":"649a8ee5129a4cfdffadd583f4bc827ce34fc2a1","sha256":"0006bee743a0d81fc4dcea7ae2fdc2bb17e560792b9939fb10ec05d76dd828ef","sha512":"445ad9f02392bf42f593f7aa1c165b8f6c17f866f3d3f5b7d171d9423dca07bbd5be3707dc3afc0e25e9ca320dd7f75b09ebce06dccd17efd8506ce2d63253d7","ssdeep":"","tlshash":"ec11b3ee0e10f91cd31549ea2ebac848f320e1b8160346622a18cf53a402e91a081593","first_seen":"2025-08-29T01:16:58.445561Z","last_seen":"2026-08-10T07:32:15.143283Z","times_seen":235,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":66,"dns":27,"connect":1,"send":0,"wait":6,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-worldcupcoin.com/schedule.js","fqdn":"vote-worldcupcoin.com","domain":"vote-worldcupcoin.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-worldcupcoin.com/","date":"2026-05-23T13:15:35.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-worldcupcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 18:57:16 GMT","end":"Wed, 19 Aug 2026 18:57:15 GMT"},"fingerprint":{"sha1":"E5:BA:C2:CC:7A:95:F3:F9:18:CE:25:D4:7F:C4:7F:CA:8F:48:94:35","sha256":"B1:24:20:3E:7A:79:71:69:A2:D2:C0:B1:BE:70:11:A3:1F:D2:DA:97:92:33:A8:E0:AE:2B:5E:07:A2:5C:E9:6A"}}},"request":{"raw":"GET /schedule.js HTTP/1.1\r\nHost: vote-worldcupcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-worldcupcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 21 May 2026 19:52:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBnDPsMYfG6KwSL6NLoay9k9QBeucPgjOow8HGq%2BtnQKzME%2Be132E8XuuGnYX9s6A8wgEtTq4VIlNC4Vx8lb21dYFB%2FdhqMmkSL4ALxqYHJHkXN1u0y9x3138jzl1Mgpp4DApqnj4j0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a004548d5b0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"vote-worldcupcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}