{"report_id":"5ad2b7eb-0e2c-4cdb-a42e-f7b8a2187c0b","version":6,"status":"done","tags":[],"date":"2026-01-24T22:38:22Z","url":{"schema":"https","addr":"payai.votetolist.app/","fqdn":"payai.votetolist.app","domain":"votetolist.app","tld":"app"},"ip":{"addr":"172.67.160.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"payai.votetolist.app/","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"title":"Vote for payai | Vote to List","dom":{"size":6962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9832b90bfa0f58279ca00b8bc4c1c52c","sha1":"268feecee0679c53c6488461dd8f67c40c1e659b","sha256":"86731aec5d9f4fd4a8a2112dbcaa2be49f8acb03772d69efbbd355ba395217fb","sha512":"b6eb1425424204f2dab55949294b87385bc898a1cf8b168c5002df662ba4fb9c6958727a16278239578058631873321951011ac066e1c7c5f624219524bf2ad2","ssdeep":"48:noJUBVlIWcFrcJBywP7wPk83Cm3xGja5Kdj6/t/xfxerEAkUVUwJHggErTdj:nya/QgJBywP7kCSPF/Sou3gRPdj","tlshash":"62e13ea151f4263b01a3c6c66aa6b72a6ed2e50bc5cd0600b3be0bc51fc6dc3dca711c","dom_hash":"domhash752510161cee03469750d22697fe2d79","first_seen":"2026-01-24T22:38:23.932695Z","last_seen":"2026-01-24T22:38:23.932695Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"payai.votetolist.app/","fqdn":"payai.votetolist.app","domain":"votetolist.app","tld":"app"},"ip":{"addr":"172.67.160.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T22:38:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"payai.votetolist.app","ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T14:04:11.372814Z","last_seen":"2026-01-24T14:04:11.372814Z","alert_count":0,"request_count":10,"received_data":1224852,"sent_data":4582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"payai.votetolist.app/","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b059913c420332a29c59c72c50e48474","sha1":"2274bc2eb1aaeda85344caa5a768ba4220f0ec44","sha256":"400a6162efd5c388a94a82d9aa89867ada04727edb0d34a70ebc5acfcf27fb39","sha512":"8ddd8a29d88d59510521389e3208799b4b713329bc7d11192d89edea5d3fa228ea16261e6b84a13294c14dd6ccd22247c8005667f7a2768c3b0582a86f18fdd9","ssdeep":"6144:yfeQe2CNMRmEFQe2CNMRmEIQe2CNMRmEcRF//WPpjQbIj0YZ:yfmlNo1HlNo18lNo1aWP1Qb2","tlshash":"a1b4308f8991fcb4da606155baf16e9ffe84ac249f05fd3eec50fe11a090552a1e23c1","size":495630,"data":"","first_seen":"2026-01-24T14:04:15.530632Z","last_seen":"2026-01-24T22:38:23.965246Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/vue-observe-visibility.production.umd.js","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38c96a1b2bd04c80603ddc25439aff0a","sha1":"cc6818d6feb4aea2f740089cd58d06edf0246838","sha256":"e25403c9320f39f6261e0ca2c93b3c1fc1ac6d6786be8a9c249e23bb45a13df5","sha512":"d0ce7428028102a134d770220524db8754263099581e300dcd3d1b24ebcb0b887ef02934137c1f7758e9bd7a0f324553b7d8a0f9ece05a5a57c92cd6ca86e891","ssdeep":"6144:fyKJOXhQZxWqKJOXhQZxWhKJOXhQZxW1nfZatdmIja2M:fsxUxBxUxIxUxYabmx","tlshash":"acb4428f8990fcb8d6305195baf57d8ffa84ac205f41ed6fed50ed86a090952b1e23c1","size":511933,"data":"","first_seen":"2026-01-24T14:04:15.525348Z","last_seen":"2026-01-24T22:38:23.960332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/app.js","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23e3c5d7d23a50cfdf7503cbf27b623","sha1":"a5292f4af75aed6078ac2729fd2efe6150a41548","sha256":"db3574b778e4ee31dae5e579019501e90b8cd04a8c4d2ff01f99b24db72f3ee9","sha512":"ff50a419cef5877635b4215d456a115bcc282e5a7ca25fa8dd6f700c758f029419236f0ee40b0b125e24c7ccb315b131cb7ba98f4ecdbdc8d2218b05cf3ea28b","ssdeep":"96:gGie/0U/A9rxZXCqiIYytje975Vnjze9Js1EoUaq9z/2E0G:+U/A9dZSqiIYytS9XnjC9i1ZKd2C","tlshash":"e6a1dd0a72f622368577667bab8b527c253134033809dd583b8dc7840f61a54bda3eea","size":5027,"data":"","first_seen":"2026-01-24T14:04:15.520676Z","last_seen":"2026-02-13T03:30:27.136499Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwatch.umd.js\u0026t=29488237","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"payai.votetolist.app/favicon.png","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:59.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 6301\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-189d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGdo%2BFpiiJAey95WB97sgGbyWqKvs9dAWaJ2ScpBbLf5OTTOHn8AwCjAdrd7rKD3B8KnpGDjzHg6lLbosIDZIeiv1qpqYh%2BK6acphwyTJazoiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3304be0b4356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"d5337bf48bd17f8ce00015576a547c4a","sha1":"ba223dc1b3797ce76aab130396a45ed0a66eb1fe","sha256":"3d25578afb051e7779860d722a0d050664c8b995e878b040c384818ba3fb4ec9","sha512":"69482119b1a15fea5610a0c3f5509618ffa094fb74098105c8a8b32cb40fdd126391d0b29bc342c5afcca488122ea52dffb8ed21fbbd311b34ed1a34d32b1c7a","ssdeep":"192:yHADDDDXrrrrNJeolbl0ZP4Y939rtT2gBi9jS:qQJDbl019tIc2jS","tlshash":"a4d17426bd563e927552fb27c81bc8c9f63544703a63c008d6ad582c5deab4c14bafc3","first_seen":"2025-07-05T18:03:19.006354Z","last_seen":"2026-02-13T03:30:27.138939Z","times_seen":10,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T22:37:58.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 22:37:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QldMFwvb004wD4dW%2BDPh%2FiFqr1gEbthcI20aAqPLJekDYDU86sbcCnkwcv3Dam9nkRgkxgAD3ToMBkXES%2B%2Fpvgn4c1aZ0bP1bg4Fy6y78HDsM%2Bi9\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3304b7bbc7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6705,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"9eb6213f818949cf0b3d38a1b98e1425","sha1":"8eb14e2b93656adf0d4c8d9f4ceec8e497c9e991","sha256":"10c5a716a3727a5bc64ec1a7dc7cd74b09db47f5b3c955c0773510cad44be01d","sha512":"3d7dadafa2ad6a2ac258b0972a12b926edbb92fbdd355a4c68628c707e23514c95d66889e0a7cca4245f51b7bf716cc6f95a5355049fc770930afdec523b6bef","ssdeep":"48:CJUBVlIWcFrWwP7wPk83Cyc3xGja5vj6/y/xfxerEAkLVUwJHgQj:0a/QywP7kCyIe6/Sop3gA","tlshash":"b6d11da151f52a7701a3c6c76a66b72a7ed2e50bd6ce160072be07c50fcad83dca711c","first_seen":"2026-01-24T14:04:15.517519Z","last_seen":"2026-01-24T22:38:23.941139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":48,"dns":40,"connect":1,"send":0,"wait":237,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/logo.png","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:58.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 6301\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-189d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ty8ZYAWRAMABTu7E6S1JSZzywxKGowdpGkyP2Ws4mEF5iPNQKFiVH5JoOfdUXi3dH%2BWx752q0J6bpfipSUR%2FhZzUSomY8D5r7rQu4Bwe4qstCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3304ba9b1d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"d5337bf48bd17f8ce00015576a547c4a","sha1":"ba223dc1b3797ce76aab130396a45ed0a66eb1fe","sha256":"3d25578afb051e7779860d722a0d050664c8b995e878b040c384818ba3fb4ec9","sha512":"69482119b1a15fea5610a0c3f5509618ffa094fb74098105c8a8b32cb40fdd126391d0b29bc342c5afcca488122ea52dffb8ed21fbbd311b34ed1a34d32b1c7a","ssdeep":"192:yHADDDDXrrrrNJeolbl0ZP4Y939rtT2gBi9jS:qQJDbl019tIc2jS","tlshash":"a4d17426bd563e927552fb27c81bc8c9f63544703a63c008d6ad582c5deab4c14bafc3","first_seen":"2025-07-05T18:03:19.006354Z","last_seen":"2026-02-13T03:30:27.138939Z","times_seen":10,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/app.js","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:58.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-13a3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOcboUoYN33fHUzMnrr8bpnrtUIFPHoxXVtuNwb0oesKSF75gHUVq%2F4efDPvIUj0pSNyXxCz%2F4jHZxuh2GTyyfhUX8I4scnB3fm7Mzdhq7slfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3304ba9b1f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5027,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a23e3c5d7d23a50cfdf7503cbf27b623","sha1":"a5292f4af75aed6078ac2729fd2efe6150a41548","sha256":"db3574b778e4ee31dae5e579019501e90b8cd04a8c4d2ff01f99b24db72f3ee9","sha512":"ff50a419cef5877635b4215d456a115bcc282e5a7ca25fa8dd6f700c758f029419236f0ee40b0b125e24c7ccb315b131cb7ba98f4ecdbdc8d2218b05cf3ea28b","ssdeep":"96:gGie/0U/A9rxZXCqiIYytje975Vnjze9Js1EoUaq9z/2E0G:+U/A9dZSqiIYytS9XnjC9i1ZKd2C","tlshash":"e6a1dd0a72f622368577667bab8b527c253134033809dd583b8dc7840f61a54bda3eea","first_seen":"2026-01-24T14:04:15.520676Z","last_seen":"2026-02-13T03:30:27.136499Z","times_seen":3,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/payai.jpg","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:58.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /payai.jpg HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12028\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-2efc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ60FH9K4Z%2FSI815TiuW6khKdY3fTXJlCtkFewCWl9Ku0oNVHJ7X1EPKhrw5Kbsiayr8rqnuL991VQzjYYAYiJkNWjtcJyfZCqZyzlMB34dI6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3304ba9b1e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"fe5c5cc54b192937454a60f719dc91f9","sha1":"603056a5cfefca373cb89971cab8ffb4a74abad5","sha256":"e6333c3e40cc5580711309173a8f4dbadba05bbe0bbbb5478331c04d82ab20c0","sha512":"bf798234bc137c06b8c4f3ba714660c6f00668a981a648f64c7f6fe214f6a9bfcf12ad007942f8c904c2673e677c746e1e1f2de1c687828c6e24a4bf5326b4d6","ssdeep":"192:sWK+CuLQQzvg9/aY58qHpYOvYdr6aee9fuLR1+JYacADFTTMnzp2J3Y6qvFlxJ:sWK+ywy/arqJTAdr66u91+Jx6zAeFlf","tlshash":"5f42bf20c7777550ef3c2db11a91bfb137426989825c83cb66c84705632ae90acd4b67","first_seen":"2025-11-01T12:58:09.923217Z","last_seen":"2026-02-13T03:30:27.132634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/secureproxy?e=ping_proxy","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:59.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payai.votetolist.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sls7H3AF80ufEAk3o20HQAzHs0jU3cDrZlH8%2F44hFBGrYunjBgK5it%2B7DUa0Dt%2FR28Dhl1ZL6A2g7KQNLH3thpxwwh%2FdbMi903Vod7W2AbD7uw%3D%3D\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3304bd0b3356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-17T16:47:50.33609Z","times_seen":9046,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwatch.umd.js\u0026t=29488237","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:59.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fwatch.umd.js\u0026t=29488237 HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=watch.umd.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 22:37:59\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 8138b88548de48e74ab8ca89ade4e0d0\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3kuTnSdn7ETJ4kxnqjpZKeBMM6YiDX2ppnBAG%2FB%2FR%2BFvoOJAsvEmIyYI%2Fq4cIcqF6Vnw6CBlL56Zu2keiRnWVo6w7e8ItdMoyJ5CLlOB0DnZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3304becb5f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app//secureproxy?s=%2Fjmpd%2F","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:38:00.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payai.votetolist.app/\r\ncontent-type: application/json\r\nContent-Length: 1743\r\nOrigin: https://payai.votetolist.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1743,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 505 HTTP Version Unsupported\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:38:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"1a-upO6eNGXiLH/etOGU8Z4TSsCvOM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769294340481\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 505\r\ncdn-cachedat: 01/24/2026 22:38:00\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 015685893c325df0a2322da974ff1106\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kN%2BYe%2Fpl3grJib0sIwEHJeQNuk%2FGOtIVwEJofgzNmdla%2BLg2Y96fJCo5sxVKkSGTf05sW8GxIzNnD8fjgX1zwajicVXVriRzM36Fp3Rc2YrV8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3304c49bf456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"505","status_text":"HTTP Version Unsupported","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1d861534f29a609e5868484697373f4b","sha1":"ba93ba78d19788b1ff7ad38653c6784d2b02bce3","sha256":"eda8600220617deb22dfaeb6cfe8c1a2105750566704e7a3102489717d53f99a","sha512":"b62eb914bda78f0e733909f1bec747354cdc97209a44cb2daba63485c3481cbc7b3ee82fbcfc5a30e129ea109f804088bf28e622cc6ff8f1cd15328e3deaed3b","ssdeep":"","tlshash":"3180003c20202220200002822200022222e022b200200208802082b202000ac83af338","first_seen":"2026-01-24T13:38:56.240906Z","last_seen":"2026-08-03T12:35:27.23255Z","times_seen":213,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/vue-observe-visibility.production.umd.js","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:58.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /vue-observe-visibility.production.umd.js HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-7cfbd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SSUQUwbJVstbyr0XOWOepw0RpQbk8XnfHFmSqzHnAS4mZ4TmGfMhE8Ww2lpDXz%2BijJOFTf7OQB6nd1McjJ2dAVQzqJZo9QdO6hOsCU50nRmwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3304ba9b1b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"38c96a1b2bd04c80603ddc25439aff0a","sha1":"cc6818d6feb4aea2f740089cd58d06edf0246838","sha256":"e25403c9320f39f6261e0ca2c93b3c1fc1ac6d6786be8a9c249e23bb45a13df5","sha512":"d0ce7428028102a134d770220524db8754263099581e300dcd3d1b24ebcb0b887ef02934137c1f7758e9bd7a0f324553b7d8a0f9ece05a5a57c92cd6ca86e891","ssdeep":"6144:fyKJOXhQZxWqKJOXhQZxWhKJOXhQZxW1nfZatdmIja2M:fsxUxBxUxIxUxYabmx","tlshash":"acb4428f8990fcb8d6305195baf57d8ffa84ac205f41ed6fed50ed86a090952b1e23c1","first_seen":"2026-01-24T14:04:15.525348Z","last_seen":"2026-01-24T22:38:23.960332Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payai.votetolist.app/token-page.css","fqdn":"payai.votetolist.app","domain":"payai.votetolist.app","tld":""},"ip":{"addr":"104.21.14.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://payai.votetolist.app/","date":"2026-01-24T22:37:58.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votetolist.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 06:44:41 GMT","end":"Sat, 04 Apr 2026 07:42:22 GMT"},"fingerprint":{"sha1":"30:8F:67:63:C9:E7:53:82:44:25:8D:A0:3C:CB:A5:B4:1E:D9:25:19","sha256":"80:61:2E:75:B9:D3:C5:F6:05:88:02:5F:DA:0C:D5:16:7A:40:8A:F7:37:BB:EB:9E:59:67:16:A9:A1:5F:3B:A3"}}},"request":{"raw":"GET /token-page.css HTTP/1.1\r\nHost: payai.votetolist.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payai.votetolist.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:37:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 06 Nov 2025 12:15:56 GMT\r\netag: \"690c917c-253c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efm%2BvO0Nd1s7MiFdviZa69%2B080akCK8I%2BDPLF%2Bj5GQiaIqzIER1x6H5MZbv%2FK17R9ikrki0aXR%2Fzm59hlQ9%2BVB2nRXbopdVaNOnPggA1HYSx6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3304ba9b1c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9532,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fda5612b04bfd2218cf9f30b580e77a5","sha1":"067c9506c3c22a47b94326cf748091d99e0abd0d","sha256":"14cd055921b4115a26ac13b0dd7eac744330a62a6e956709b77f79dec1b3ebd6","sha512":"88b75d10d55ffc322317eb998a1dd392d5956ddd1110e4498443b80e62e1af9bffb00b2c8c4e4049305625f50f4a35d956b2af3d796d119a12a27309a1ca3373","ssdeep":"192:LgNgSPJkxI+5dEURFCfb9jFw6198WidRRpvP+fnNayG:LlhxEw0uUG","tlshash":"ec12f00d69a319a96c5b982877bf9ac4335c5047cc0edd2e7ade62448fcd3b47192b8c","first_seen":"2026-01-24T14:04:15.527453Z","last_seen":"2026-01-24T22:38:23.963129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}