{"report_id":"5b59ee34-9b9c-4cb1-9b24-e0bcf482ae83","version":0,"status":"done","tags":[],"date":"2026-08-14T17:36:23Z","url":{"schema":"http","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"title":"Save, Grow, Spend. Do more with your crypto | ether.fi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T17:36:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"voters-etherfi.info","ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-14T17:36:29.325866Z","last_seen":"2026-08-14T17:36:29.325866Z","alert_count":12,"request_count":12,"received_data":6402896,"sent_data":6415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-14T17:36:34.442266Z","times_seen":3466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-14T17:36:34.442898Z","times_seen":3359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/material-modal-1.9.6.min.js","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ada3f766943c69084248b8f4432eacd5","sha1":"ba67cc26b29c91ad4c8aacfc423520a9b05b851c","sha256":"fbc823f83119406432edcaf3541b758ece69d2903574d19b59aa2f99362253fc","sha512":"dd499d9cce86bfe0de0bdedfc8c5aa91529ea3f57908ec16cb76003184f79ed378374958ea01b0bd397ea00fadf6411bb6206d7c18174a25263c4c158ed0f1bf","ssdeep":"768:xk0m6cwlvLx4zDvLx4zN51SegkMjlMKUraK4Ll0XMhseQQEZF5NceBW8cyct/cN1:cu5IanXNlI6","tlshash":"c953c4e4151bd2e88e4220ded473f109e4641e53ce2cf1a7a26cecd0745ef2686a767b","size":61335,"data":"","first_seen":"2026-08-14T17:36:34.431469Z","last_seen":"2026-08-14T17:36:34.431469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ef6d003abe6a4b01cd6bb54b338eb7d","sha1":"350b090f992d65330c08d8d04af2c1a0effae27d","sha256":"34b6a89e4b41872f93e5af016cb92b5b1446541da741b7a4ae8d85f7428f0ed5","sha512":"5daab996e9769615a99d0c122c442eaa2e19a3d47f0e78db17e2f551c6acff8364692869e6b6035ad07290ec0a6b0b3b9cedcd9dde578e0242b064c84c92f47a","ssdeep":"","tlshash":"27d0a94c24f19962048f783e098f084a7a26a403b10c8ec5bcdc96146fa1e6c00e0a48","size":254,"data":"","first_seen":"2026-08-14T17:36:34.443515Z","last_seen":"2026-08-14T17:36:34.443515Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2ee558e52e936ae52ab2870043e869d","sha1":"54d419ab81e3021cc5f9cfc6f4a8eb9b4b3c07ff","sha256":"48fe734d83cac449d613466a0425ab09dccac383c1a568c800ed91ad65505ebd","sha512":"b1d2acf2db4d96ef93a94c7a1c6f63db35020d21a7adc0fbe958bd687c357b76bc837aef80467c8d17b11380a0d2b8862d2d5b6a98af5f6d3b5eecac14632dde","ssdeep":"192:OtkdES6CIf83e2SXC8uWS6Ct2bjroSI3brZUqKfzymDHvCP:Off83qP3rw5","tlshash":"ffd16c7e9ed20637986bf5bd8f9b7080292284675909ed203d4ce1029f8cd2997f6f94","size":6535,"data":"","first_seen":"2026-07-03T15:15:51.564143Z","last_seen":"2026-08-14T17:36:34.444716Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/7700e6ad-c41f-449a-9833-d68fa34f8dc9","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f818760ad874e8f9d4b155edf1ef726","sha1":"98867f391c326a2e3911fd648db5b48842da4082","sha256":"1fa5fa313b7765e59c766d00a17a1ef7759f0d088178b2c34c1c66addff87554","sha512":"58753474c95e009d75b5b98ddb6253317dc43fc74def77338d6b657da3f5348e209032b8bfa7ba259c23d2324338abd5424740b28a0a37a1d6657431a062cdbc","ssdeep":"49152:aGkwdNZngkQpHVG21wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtpZX:F","tlshash":"88e523927d57b4b5cf48036471eb1d0e29980c12546db1eaf398f9c2385eba0c1ebd6d","size":3302487,"data":"","first_seen":"2026-08-14T17:36:34.445834Z","last_seen":"2026-08-14T17:36:34.445834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a5a50ae0c194448c1912c9a315ca8fc","sha1":"ea9660357e0eabdb00e7a4470f646e6b49d90f53","sha256":"79a32f46a786cd1f88c5655853501bb876e9ec30db2199134f52c1266d37c936","sha512":"ebce8908a57f8ab3e6b4cb2f64198ba7f62ba151d84d783bf3d60e793b326c27dcadec2e090d15948188a730a2663c841c96ccb8a4a7ddd051e8109b2a2e1ca5","ssdeep":"49152:BGkwdNZngkQpHVG2rwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtRx+:d","tlshash":"50e523427d5768b9cf98036570db1d0e299c0d12645de1eaf398f9c238aef60c1eb92d","size":3300136,"data":"","first_seen":"2026-08-14T17:36:34.447532Z","last_seen":"2026-08-14T17:36:34.447532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-14T17:36:34.44889Z","times_seen":3422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-14T17:36:34.449496Z","times_seen":3291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-14T17:36:34.449971Z","times_seen":3507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"voters-etherfi.info/2b8e8803718245581824955887bbc0625d1e9a0e.png","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.263Z","timestamp":1786728943263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /2b8e8803718245581824955887bbc0625d1e9a0e.png HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:15:02 GMT\r\netag: \"6a754db6-adbc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2FK3sJH7GvxvR5NrolxPQViGk6C%2F267yUimY%2BkKP6Qqnf0K0EKyLoL9GZkr4DqUvDv%2FXpLqY7CEHiAskJOwt7sxRthgOEvEhKHc1oJneDqfJyh69Ekss2UunxKsOI48qo8ltR85t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2b1b7b76be0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44476,"size_decoded":45413,"mime_type":"image/png","magic":"PNG image data, 384 x 508, 8-bit colormap, non-interlaced","md5":"15b44bd7aabcb02186decb28cdcbb58c","sha1":"2b8e8803718245581824955887bbc0625d1e9a0e","sha256":"f6f8c5a2a1c28045ba8f48e09344c7c022ca1d20f8b02882fea4839c5aa4269c","sha512":"79d13ea436f57d204afd8b802679b8c7dd1bdeeb5cf5ecd61bbf5b15f8d0ad8cfe88c5d06754b2354d308d4e56e320f53112ccdf30a25617c58330cdf8ad9f79","ssdeep":"768:RS24oObyXPH5oRtKLH9HDsxF5E4IscZEuSmUt5DjvafnQuXy6Zuc1McU:oPDYH54K9HD6o4fNmUt5D7knxbTMcU","tlshash":"9413f24a94cb6088403dd863b4288ffca394653393c8b6f7cce9057d60de9396db6b64","first_seen":"2026-08-14T17:36:34.425798Z","last_seen":"2026-08-14T17:36:34.425798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/8461047ff740d71e7b6947b01f4ff7b2c2d30009.webm","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.550Z","timestamp":1786728943550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /8461047ff740d71e7b6947b01f4ff7b2c2d30009.webm HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: video/webm\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:15:00 GMT\r\netag: \"6a754db4-ff7cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 44\r\ncontent-range: bytes 0-1046476/1046477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXQI2OR%2B7%2BW66Tplgn7634fa01QgVMW3%2BwwOcaVVUDn7lx1nybiRdccrByPPjH5lQMAsB9vpIzXd6vYYKEtJrkHuDCsq91iFKgkhjQje1LMMgPFOkidafpZDRi0BUhWlEkTeYGad\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2b1b7b92c29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1046477\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046477,"size_decoded":1047437,"mime_type":"video/webm","magic":"WebM","md5":"e1d35219a5ceb15be571a1831476abe0","sha1":"8461047ff740d71e7b6947b01f4ff7b2c2d30009","sha256":"25bab62e605c7ea72263e15eacdcd507094abeb72311fbeb5bd0bc59c4e0073a","sha512":"90545aa94b66c81269baa3ab40a8bd2b0eedba003d7c347f648c3e8e0156bc2ed1bfda063a21e19cf412ac8b2b7a13bfaf21bf9aafb32a1b95e04427f81a8223","ssdeep":"24576:NrU6+lw+lLQTfl1HV4wHXlUS7bptQRUTWodaWBwoA/:NXt7aw3lXtQMaWBwt/","tlshash":"ab2512da98e3a46fc8464f35d23b8091d5131d43a5f80bd526b6aa89bd34b4cca1fc33","first_seen":"2025-06-25T12:52:18.929992Z","last_seen":"2026-08-14T17:36:34.427168Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/favicon.ico","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.599Z","timestamp":1786728943599,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T20:45:54.215879Z","times_seen":17892639,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/0c94d93535c2f82fc61d9f1476b6d36bbda5fe9f.png","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.723Z","timestamp":1786728943723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /0c94d93535c2f82fc61d9f1476b6d36bbda5fe9f.png HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:14:48 GMT\r\netag: \"6a754da8-c86\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 43\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SC7cgv1jWHnWMdCkHOqEPSetC%2FnWGupHdIpGmoPAnP1IodPGHizvMURB%2BjlCTKnnwyZ7WaakVHluzx3%2F7PgxI7PPTli2sQ6azuKhmnyl3uv8DZ2TNP5P9DkiNdd4qYN%2FXSbjFAI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2b1b7ba3c62b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3206,"size_decoded":4144,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"5163fcdfc8d709198b66647cdf40d0e9","sha1":"0c94d93535c2f82fc61d9f1476b6d36bbda5fe9f","sha256":"29417058714a125350903111189a4c54555a01835f9e478ed796281d7461919d","sha512":"62fdc4c0ad7f019b69a8d9601c0966c23ae64672a30fb1b76673d5448851acffa80134c827eaa9bce8f21f984e3a7e2e66ae0141476381abe3e078b864213c2c","ssdeep":"","tlshash":"44615fe18f06504f64fd95c6de3558e7e1785b38e8c5c185ac717b2d9c6325143c4f52","first_seen":"2026-08-14T17:36:34.429964Z","last_seen":"2026-08-14T17:36:34.429964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/material-modal-1.9.6.min.js","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.251Z","timestamp":1786728943251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /material-modal-1.9.6.min.js HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 02 Aug 2026 05:23:44 GMT\r\netag: W/\"6a6ed460-ef97\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9CS4VDStUV6NXA1P5nTggJ2sr%2FSe7MoAVs2l7NM9may27DpLghzHEu5M6mWNAFFItaGz6QxZFvoDdv57LgNBAPy256nQtu2WssYKobmf2TcjyTTG%2BrU9LyzpuKzikg4MImnwk2Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2b1b7b75bdab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61335,"size_decoded":20058,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61335), with no line terminators","md5":"ada3f766943c69084248b8f4432eacd5","sha1":"ba67cc26b29c91ad4c8aacfc423520a9b05b851c","sha256":"fbc823f83119406432edcaf3541b758ece69d2903574d19b59aa2f99362253fc","sha512":"dd499d9cce86bfe0de0bdedfc8c5aa91529ea3f57908ec16cb76003184f79ed378374958ea01b0bd397ea00fadf6411bb6206d7c18174a25263c4c158ed0f1bf","ssdeep":"768:xk0m6cwlvLx4zDvLx4zN51SegkMjlMKUraK4Ll0XMhseQQEZF5NceBW8cyct/cN1:cu5IanXNlI6","tlshash":"c953c4e4151bd2e88e4220ded473f109e4641e53ce2cf1a7a26cecd0745ef2686a767b","first_seen":"2026-08-14T17:36:34.431469Z","last_seen":"2026-08-14T17:36:34.431469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/7075201342e8ed90ffff867d7f6ef65602a1fa3d.png","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.265Z","timestamp":1786728943265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /7075201342e8ed90ffff867d7f6ef65602a1fa3d.png HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:15:04 GMT\r\netag: \"6a754db8-107432\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C2cVtYZ8A2S4a0OaUwiKY6qEh5Y6iEanOx%2B2rIjjNS5AShoRsXoE%2F6W8JfP3lsU2fgL0c7xKlyACN3XEsn7dqC1PuqYT3yGFsvyUY1kqy5b7Pj91Ef0J4KdWA2wsM6fxsx1mBoj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2b1b7b76be1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1078322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1078322,"size_decoded":1079259,"mime_type":"image/png","magic":"PNG image data, 2183 x 2126, 8-bit colormap, non-interlaced","md5":"c7612c5b95c20c470aa7b895755d369e","sha1":"214a1e12ebe367544b106a03a0cfe4dcd4e74535","sha256":"ac66d1aae059815d24255ef634388f458a6ebd8abc1ef5e8afd0e9721d2fa40d","sha512":"d89ed1bf52b0febc686833460ef5423c71c2ef6b57fd70298b18dccc40f2a465caa1f67061d5d717d45b80b4e018ccf34dc0dc880acf29a3937452ae33b26ade","ssdeep":"24576:Dn9hhgRrJfwazVjUcc543BLeJXSoQa4aZSCyZQz523iflXKPQvZ:DnHqrJXznwj9hG6ESd6GZ","tlshash":"e62523e1e6f805bb84282f4af9c16581b1cf1db052b6ca479794f6b040d9073d36bb9e","first_seen":"2026-08-14T17:36:34.432756Z","last_seen":"2026-08-14T17:36:34.432756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/index_1.html","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.500Z","timestamp":1786728943500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:15:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 44\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtACSv%2FZce%2FcpBtfmmHUTdMMQ8kXeS0zwfjxyf7uEPoEnORxutN9FYOEc7CuxuBSQxU8qHBskajmSTEBTTJ8o6eVyCD2WIS8vJXkJynOk1qh3NZmmn6czMkEc%2FwsDebvXo062Ym5\"}]}\r\ncf-ray: a2b1b7b8dc1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3923,"size_decoded":2585,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3521)","md5":"160b1bd4030ce74e2961c02ed1f13805","sha1":"ef50ba845061b0f0d1fcabe47fd426f923be7560","sha256":"51a3fd29841bbe5d278d4356cb506c8f6a67cb1ddf873fb3417a82039556bb1b","sha512":"0ca09223dde8712e9ce9840304d1a95b0ccaa1bc5dca7da481a32e7a0926dba8692d87fce660a27ec99aa9f4edc496e2b308f2569622b6d1450efb674906b4ad","ssdeep":"","tlshash":"0b81b6377b68211af333c89fa1c2ab893010a221d16bdab5ff57df15d5ca1651e1278c","first_seen":"2026-08-14T17:36:34.434444Z","last_seen":"2026-08-14T17:36:34.434444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/f37e0adbea861c071f3713528b64192284c524e9.webp","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.520Z","timestamp":1786728943520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /f37e0adbea861c071f3713528b64192284c524e9.webp HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:15:08 GMT\r\netag: W/\"6a754dbc-296a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=4,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOjFwqpWrQzKI63g660rF3bwODe9Aotg8E30C479MKro7%2FHnu0%2FAoogkpzBl1%2BmT2g%2FaMY%2BGzGAH4vWW7NQL9q6TiYK2bXPtYoY4Qkhp0j4LjqzAZ5Gnau7Hr1Orzr6AVWLI8NU4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2b1b7b8fc1eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10602,"size_decoded":9762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2960x1544, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac7d86ed7345fb1519fcc150e37d8cfc","sha1":"f37e0adbea861c071f3713528b64192284c524e9","sha256":"28169f67d409ef928af27985b2e89dd97d458cfc139db3faba12141adbd7b990","sha512":"54c4476b122f7c2f6e5dc7358871bb209ec39dba2af6cd4822197ab5156275deb4c9de2a76f22334937c357b1148bb592b38601fadbe63576a9a9920f363fee8","ssdeep":"192:IDWXzUt1P08fLBOaZ5j96PjWbw3KfxqB04bBnr264nTvVTvf/oD7i3Pypt:MP08fLBhj96PSbwEYfr2nVTn/oDVP","tlshash":"51223c1f2fe18c384c8969a5b29b9940f6cea1b479e05bf0cbb15921692b4f5cf4d50c","first_seen":"2025-06-25T12:52:18.93337Z","last_seen":"2026-08-14T17:36:34.435647Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/01a56dd40a5829d154d141914771a9802d1baba4.png","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.724Z","timestamp":1786728943724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /01a56dd40a5829d154d141914771a9802d1baba4.png HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:14:52 GMT\r\netag: \"6a754dac-240\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 43\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poRjE%2FOMlfSjxoh2y0zVXKmBHU4g4v6%2BZWD0%2BCy6mcq3FOm7L3Yp0dL0tVxvf3Z6%2FUvNxSy%2FO%2B6GGu26ktewtjvNyJV8x5e4X4RWpMVECi5stT7JtLIQXxB%2FwFF%2FLaVGcOsSyhyy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2b1b7ba4c64b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":1521,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c3b83ee9462e3aff024b3a44aa7b24a0","sha1":"01a56dd40a5829d154d141914771a9802d1baba4","sha256":"d20e832e761c72ca2120794b176d42daa5a8af0b210f291c93f3bb66f0704aa4","sha512":"7ed3eb7615532d409b57895b41abf5789eb04f05e1037e4ca15550e09ca9cf625b748eecbce174dae6fff607edca992cbce9250f461dcee75c84301db11c4088","ssdeep":"","tlshash":"a4f0e1d27f0d283bcd058bb93582e5a0b49f34b6617a440d5ca5c62c4a56b64d589263","first_seen":"2025-06-25T12:52:18.949188Z","last_seen":"2026-08-14T17:36:34.436353Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/secureproxy?e=jscdn/getFile","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.730Z","timestamp":1786728943730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://voters-etherfi.info/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://voters-etherfi.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"zjtn1ioip3luxx2rjege\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48e4V0VOEA5716bFrLJh%2FEe76KfDx6gb%2BV1njEZevv5Kv%2BdgKZRo%2FhhhoZkE%2BG6RdtizWzFf8dFgYh6nC0RTS6qFTPwFYMpqRJ9o5kXEcXa8wp26Hsi3lIKtIdAiL6eiDiOI9MY%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a2b1b7ba4c65b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3302487,"size_decoded":2545061,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e91ab8cd554dd79c05ec75ddba169316","sha1":"eb676d0bf1235bd6af6221e37574856096e5652a","sha256":"d9eb5d2ac8ac5fa7335a8a2d8b5ae7ac9226afa554687c8009fc40b809565a43","sha512":"3ea76afe65a7d5fdd9e2113a09386d6fa63036639c7db6930afdd069ae3ec5e6f2eeb2c2d19d67a19390678ce2712fb8630f253009f4d6f9315858a8a21a0d19","ssdeep":"24576:Eb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeTt8kHV6F5t7qNt:aGkwdNZngkQpHVG2t","tlshash":"1b2523a3af5fb43c8b6c4a58722f1d0f3d494853508996b6f6c6e8c7358976081f6cb8","first_seen":"2026-08-14T17:36:34.437874Z","last_seen":"2026-08-14T17:36:34.437874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T17:35:43.017Z","timestamp":1786728943017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 04:29:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 44\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEdfxS1NOLTgzEec%2Bvpy9iggmKMsg3G0k56jnsZJGOGf5LHvBpU0fE9voopKnClIjM3NsQgg9fwBQ4NTUGGogJBA89yC99oHxaze88DdkxjLd1CV3N%2BSs2cnm2NkuuU4VY48QnDB\"}]}\r\ncf-ray: a2b1b7b5fba6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767394,"size_decoded":90449,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (933)","md5":"65a031e4d531ca742fbdb25b0084dca3","sha1":"d648bc5c8ed423d7af8aab857f7a7f357ec01fb2","sha256":"45fcf343bdc3de3045f64d5337b6ae0efd44089653c63a9a1745be62c0c7ed1f","sha512":"ffbc0488bdd6de45b0b5ba0eba31afb97df630ec8343f882cd1b6bdae0e15b28dbf6f8f19acad94cf1a6ebec9c8434c61dd5cd8fe0cda1e89d4b7f077760ac04","ssdeep":"12288:AzAhYzWSes206ue4g9pX5k2RoTJtS3iGJgv1mY9czmMh45sgKQwuoDxgGYeqoSXc:AzaTl","tlshash":"a8f42e4aa1b182772d23717916efa24c733ab047ea0ddfa87d9c2240cf963f99c52745","first_seen":"2026-08-14T17:36:34.439224Z","last_seen":"2026-08-14T17:36:34.439224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-etherfi.info/f935202cd8fbcfadb4b18878cf1099ce9abb7fef.jpg","fqdn":"voters-etherfi.info","domain":"voters-etherfi.info","tld":"info"},"ip":{"addr":"172.67.185.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-etherfi.info/","date":"2026-08-14T17:35:43.262Z","timestamp":1786728943262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-etherfi.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 11:41:14 GMT","end":"Thu, 05 Nov 2026 12:38:33 GMT"},"fingerprint":{"sha1":"6D:5E:05:1E:A3:03:77:53:67:4E:36:E6:AB:1E:1E:11:CF:19:78:6E","sha256":"39:97:97:7C:DE:00:5D:A0:67:80:06:E7:75:10:35:EA:B8:52:DD:55:D0:04:75:1C:79:70:A7:CD:58:00:05:87"}}},"request":{"raw":"GET /f935202cd8fbcfadb4b18878cf1099ce9abb7fef.jpg HTTP/1.1\r\nHost: voters-etherfi.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-etherfi.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:35:43 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 07 Aug 2026 03:14:56 GMT\r\netag: \"6a754db0-11f13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGWWn2LxOxIBbqCd5UuH86nU%2FiYzDuscY1jrZTyFdJJaUbH8Qksj20cATDSJsFPKPhiMtUMDiwL9mQ4pA12oOx62RklIjBW1gJzy9BXLb0mvmeTNB%2BaTh9LTApz9qYzB4c0iYWbt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2b1b7b75bddb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73491,"size_decoded":74426,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"fcfefca710c801de3f59d07dd373c54a","sha1":"f935202cd8fbcfadb4b18878cf1099ce9abb7fef","sha256":"d66a9b71f46aec503c62a192f281199be5649eea7f006bd2e80c737468aa08bf","sha512":"ded356b098d872dcd758539ea226ebb0df3c61626789e6e87b8188bd930fe4dd5cdf5625288e69f2aa27b604fe4af0d9521c38cbacbcbdd383999f1b3c39b0dd","ssdeep":"1536:oTI49FgYJtvZY/0Z36GgIkg6zFINUA55JppoaUPYqp455swHp8tvl:o0yj/6G22/9kJ2AwJ8pl","tlshash":"6f7302837e8cc08fdc914930911adb27992639e91e798fd6ad828441f7b253cdf32697","first_seen":"2025-06-25T12:52:18.945945Z","last_seen":"2026-08-14T17:36:34.440517Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"voters-etherfi.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}