{"report_id":"6f0227e5-6940-4af8-8cdc-8f3093a303d7","version":6,"status":"done","tags":[],"date":"2026-05-14T18:46:14Z","url":{"schema":"http","addr":"vote-megafi.com","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"title":"MegaETH | The First Real-Time Blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vote-megafi.com","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T18:46:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-14T18:45:48Z","timestamp":1778784348,"ip_dst":{"addr":"172.67.217.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54008,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-05-14T18:45:48.839313+0000\",\"flow_id\":1447019987904483,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54008,\"dest_ip\":\"172.67.217.44\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"wispy-bread-2c7b.perlearbitrary.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-14T18:45:48.829411+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vote-megafi.com","ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-05-14T18:45:47.895185Z","last_seen":"2026-05-14T18:45:47.895185Z","alert_count":0,"request_count":6,"received_data":4299700,"sent_data":2904,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","ip":{"addr":"172.67.217.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-04-30T07:06:59.452956Z","last_seen":"2026-05-10T11:00:41.659437Z","alert_count":2,"request_count":2,"received_data":3624103,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ccae1de0e94806dd15e1ef8d94c7747","sha1":"b3b7a2c596a14754bdfc64a55d6bfbfe7edc80f3","sha256":"41e26c1e1ecda3500168a77857f785853ae068f02305b4b2ed155f013cf16951","sha512":"7a3257bc73dad02474e1efa8e7a7b63f78e751a894b259b5522e3f581349c48e7f0c850fe0faf49966aa82b59190605f896a96ff0d46eb736e24267be897ee3e","ssdeep":"49152:Q7OwPEZJsjkwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtK+Z:s","tlshash":"c5f523022c9769b58f48536270e75d0764d80e1358ade0dfe764f9c134aefa281efa1e","size":3424976,"data":"","first_seen":"2026-05-14T18:45:52.289027Z","last_seen":"2026-05-14T18:46:20.711111Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-05-14T18:47:38.260114Z","times_seen":2886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-05-14T18:47:38.264701Z","times_seen":3002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/128727fe-9757-4b37-9127-1bc788c39b2a","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9278ba4e60d575d27bacefc81d31e6","sha1":"130dfe615de4be4ab06afcce6dcb2baa6d2aa7c3","sha256":"a85a16d8fb782ee2bbbec563e294625971a4c2ed6c3869c7ac64c3c251d892c9","sha512":"cac96ffa07c06700a54e7d7d16803f4e6b4b8e5089e54214baf15ad57ff7f04b9e36867e5f6df433662c50c585aa7ab69c7fdf27f1b2e62debc1fd25760dad46","ssdeep":"49152:77OwPEZJsjuwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtsIC:U","tlshash":"e6f523423c97a5a58f48136270f75d0764d40e1394adf0dbe764f9c234aefa281eba1e","size":3427566,"data":"","first_seen":"2026-05-14T18:45:52.287171Z","last_seen":"2026-05-14T18:46:20.714729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.217.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d29767573d6b615e2e10a1539d3fdc4","sha1":"0642b9a5ba196385496128392e7b5a7b0f856cb8","sha256":"15db5611475a38f0bf61b237d0f6fe4d50b3c7f4981646fd4542fdd97293dea2","sha512":"798b920fd4ad7b960f1dff2807da97367da3bbfde1a158bfc041e29a46c396c175bfe14fec0de485a6eae30bd6c2b8f13838235d9ab60f270074724209f3c103","ssdeep":"1536:jXQhXxHaVGY+MkDrDW7hprOTTCmkJSrdHGV6YyMkaSU92M:CXxHRY+MkDrkBOXCrJSrdHGVnK4F","tlshash":"5e1493a8cb97809c8e59518ec0b3f845d0505d2bcd1cb467ee1eedc2766aba680c717f","size":202301,"data":"","first_seen":"2026-05-14T18:45:52.279682Z","last_seen":"2026-05-14T18:46:20.697809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e3a522dcc0ae1b14c57ce1ac0e900f3c","sha1":"1166f8bc2dec8ffb9be087f04492fe86d09becd6","sha256":"9e8311ff5e156737f7b370851b10dfa2a33c70e81bcda81cea8d8c14d6ad24ab","sha512":"45f82ec206ab94099c50ce126016d85de610597ca60a47d97c539d4068a86bd50ec3ea47d8475ba506ae17c9f11effb746d371c95b3aa63dc14bbe9171f38043","ssdeep":"768:KhUnijLIcfYj+v+GW90Fi5c6wcoLlW90Fi5c6QcWR8c8whTxNecEcsDJ:KqcjRFjR8c8whTxQV","tlshash":"bc236fe0251bd4e58e5610eed073e802e06859a7de7cf1a3e92dddc0752ef22858b53b","size":46739,"data":"","first_seen":"2026-05-14T18:44:20.915817Z","last_seen":"2026-05-14T18:47:38.263517Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-05-14T18:47:38.262013Z","times_seen":2830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-05-14T18:47:38.265218Z","times_seen":2798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/ultrakit-1.5.7.js","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f6aadf1e4b81a9fd25e10ec46fcce5d","sha1":"2fdee54e28ab81554851546628e2de3a7bba571d","sha256":"476c1eeb5b6c3520f192d34ffe0ba5aee97d7385468a6dc368b4d243c93a2075","sha512":"caabaf786e1524c0891c5da6623d597dc74c0a7a7cababb96ec2e1cb50a8369e465bcb6e658f27b461b5abc938857510c36d5212c7d2a6e2a06a7f178e444e67","ssdeep":"768:oCcmXcyNlxwAEtrMmDlqLMITsywQkgEe6SZcN/csf5cNCcn1coxoc/c98c+WlTA3:RlrYMkltI4mfYCffpEW8u","tlshash":"fe9350d5980b94948e4562ded47bed08e4284eb3cdacb1a7b92cdec1752df22c48712f","size":89249,"data":"","first_seen":"2026-04-30T07:07:02.162673Z","last_seen":"2026-05-14T18:46:20.704293Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-05-14T18:47:38.2615Z","times_seen":1621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-05-14T18:47:38.264172Z","times_seen":2965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-05-14T18:47:38.263016Z","times_seen":2935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vote-megafi.com/","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T18:45:48.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:45:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 13:09:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtoedjonebeIqvgGMsA5zlFEy%2FuCnfA7JnhkINBI5BxDlbNvazTa8ANGKuHFS1EX8c%2FWpYIZNPpCC84d1e80gejyq%2B2MJYu%2FvqoeZi9jQIyeDvDlNdJMK%2F4vwwbmbAPTwgU%3D\"}]}\r\nage: 30\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fbc0fe33f8a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150979,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c9ab05bc22ce64a6acb73817d9abb7d","sha1":"0684a7e05e9883c4044074bb71fe61515caaf779","sha256":"4cf4577992abcdde7ef890566976ff2357fbef5575496aa3598a193103b8c528","sha512":"c2964d2e14f44f1238f2f4509df13d3c836a9006bd1394f779c980c17426494bf81496371610dab8a7ef1e833fee99e1467dad776aba3fd118386fa2989be277","ssdeep":"1536:iILr+F6E5ToDNl1UHQJlQBBvJwgGKGczlJqE0aktkeje1emeleZeGeneCem:iIL6F6okNlew+vJwgGKGczlsaktt","tlshash":"ede3739e69b201251c23b1bd97ef5668b23ae083dd1fdc647ecc2605cfc82e49e92745","first_seen":"2026-04-30T07:07:02.154129Z","last_seen":"2026-05-14T18:46:20.695332Z","times_seen":7,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.217.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:48.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 02:19:25 GMT","end":"Tue, 23 Jun 2026 03:18:07 GMT"},"fingerprint":{"sha1":"A6:25:9D:4A:38:D4:2D:9F:E1:29:70:71:B3:2D:9C:3E:58:44:59:4D","sha256":"86:A4:C3:14:AE:CA:53:F7:9E:A6:7D:9F:5A:F4:AD:96:1D:70:F6:30:92:10:57:FB:6D:D8:0F:DC:C8:18:20:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-megafi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:45:49 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkKLoSjIYE8FUZUpaGYMp%2F2V%2F5Dvv0MBkjtRV%2FFuq0Mj4ERfgWpFxmG9os6dTG1ohTWg3igMhpLZ2KtlA9%2FCjgfAGnz0xucKuqYAnZ5jsFylZJeWfrQoX%2B122EMCpjx7uOdc9ENhiZQIjo9enybcwkEWCAVI8%2FCfAZMkj22Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fbc0fe45fb5a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203097,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50674), with no line terminators","md5":"0d29767573d6b615e2e10a1539d3fdc4","sha1":"0642b9a5ba196385496128392e7b5a7b0f856cb8","sha256":"15db5611475a38f0bf61b237d0f6fe4d50b3c7f4981646fd4542fdd97293dea2","sha512":"798b920fd4ad7b960f1dff2807da97367da3bbfde1a158bfc041e29a46c396c175bfe14fec0de485a6eae30bd6c2b8f13838235d9ab60f270074724209f3c103","ssdeep":"1536:jXQhXxHaVGY+MkDrDW7hprOTTCmkJSrdHGV6YyMkaSU92M:CXxHRY+MkDrkBOXCrJSrdHGVnK4F","tlshash":"5e1493a8cb97809c8e59518ec0b3f845d0505d2bcd1cb467ee1eedc2766aba680c717f","first_seen":"2026-05-14T18:45:52.279682Z","last_seen":"2026-05-14T18:46:20.697809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":471,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/10ef7b1c22254ba295d67b6cb03595b1fd70e216.ttf","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:49.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"GET /10ef7b1c22254ba295d67b6cb03595b1fd70e216.ttf HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-megafi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 18:45:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12772\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 13:09:01 GMT\r\netag: \"6a0477ed-31e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 29\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqU0zUCN4fIedq3517hf0IWlCjerd1aJ9rIdiQTtDcQQ1JDUbC%2FcApi0y3LbsoruvoiLb9H0%2Fe1O8WIHKEZLI5xuR%2BXZcsU0KBNvS3ZwsCRp%2BnwAvl%2F9KRHMIzRnKGWJZoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fbc0feb7bca712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12772,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"800e58743d8cb5e90d3ca06ef8c7ac2d","sha1":"10ef7b1c22254ba295d67b6cb03595b1fd70e216","sha256":"235e75e5fd6429303cae29518e112572f55fe6f8fa66202194d21bcaa3f03c9a","sha512":"de98a42534b93262d248f1f26b54e7a68c19875b34981e96cbf0c22104c93ef91a123b24747d7a237a80c32d5a7a7e075c0a20119e1607e71d66a8c5b0253638","ssdeep":"192:KcHfEXTM7n1aXQBG5JrajK6a+QPBb8EUrhyrVVzxy7W+g6xezH73jT27//Mp:Kc8DMRCSU1BHTyK+heT73j5","tlshash":"4642e91ad3a9cb6af44733bcdde21741e7b65740f3a9e74b000d9066ea582c4859873f","first_seen":"2025-09-03T17:27:13.566566Z","last_seen":"2026-05-14T18:46:20.702162Z","times_seen":58,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/32a5639cbf87b4992575738e1f72578d7530744c.otf","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:49.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"GET /32a5639cbf87b4992575738e1f72578d7530744c.otf HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-megafi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 18:45:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 609908\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 13:09:01 GMT\r\netag: \"6a0477ed-94e74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 29\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HkqJwUFZ6gWvf6KwJKTD3iBp9kLZvONXMlPhPiTYo6ljo10QqTIQvXi3FvG2iTso2nnxVX7%2BzIMK%2ByXxy4UTDUg5wbL1IN7sN%2F%2FYD8c4p7qHrvSrDYPNLrzYXDtSvESC40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fbc0feb7bc8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609908,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"b3ac1bd5e427f84b07373609c6e63d4a","sha1":"32a5639cbf87b4992575738e1f72578d7530744c","sha256":"14928444e337995a7fe9bae85e20b83139f6e0c78416df87feaf68613d41e02e","sha512":"f0982ff299c03d971b14352d2f58f7b51497d3bbdc99f6129f4feb85c66b32f155aa880364b29b6d60c1b57708df44aefb5b34e2d0e6cef7c22549906f28b0a7","ssdeep":"6144:X3Ax9NKA6vWW+LWu4UEvLcEBt2i/PcR86YRNqDKcMxgxb4sjYGKz:X3q6vWW+LWu9EwZi96Yzq+cMxgxPA","tlshash":"72d452111604bd56cf941206cceec6950eb3bacf8f1977d66d6312cb8fc9d1e162e22a","first_seen":"2023-09-10T08:23:33Z","last_seen":"2026-05-14T18:46:20.703276Z","times_seen":225,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/ultrakit-1.5.7.js","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:48.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"GET /ultrakit-1.5.7.js HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-megafi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 18:45:48 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 13:09:01 GMT\r\netag: W/\"6a0477ed-15ca1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 29\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BiAbcX0s6%2B5CupkUHBLa5lpyBh1yK6%2BTJU2wKc3ERu8OiYiHViM9m1g%2FylFb1IC3%2FBe%2FbQwJZg3XHagJDnOTLyngNSdY5tduv3gtE0yr3Noti1ZVEihejQKvHkka4sCK6U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9fbc0fe43ac2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6f6aadf1e4b81a9fd25e10ec46fcce5d","sha1":"2fdee54e28ab81554851546628e2de3a7bba571d","sha256":"476c1eeb5b6c3520f192d34ffe0ba5aee97d7385468a6dc368b4d243c93a2075","sha512":"caabaf786e1524c0891c5da6623d597dc74c0a7a7cababb96ec2e1cb50a8369e465bcb6e658f27b461b5abc938857510c36d5212c7d2a6e2a06a7f178e444e67","ssdeep":"768:oCcmXcyNlxwAEtrMmDlqLMITsywQkgEe6SZcN/csf5cNCcn1coxoc/c98c+WlTA3:RlrYMkltI4mfYCffpEW8u","tlshash":"fe9350d5980b94948e4562ded47bed08e4284eb3cdacb1a7b92cdec1752df22c48712f","first_seen":"2026-04-30T07:07:02.162673Z","last_seen":"2026-05-14T18:46:20.704293Z","times_seen":8,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/7cfb7f2195e3b94f9e53e611524667ddae69041d.ico","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:49.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"GET /7cfb7f2195e3b94f9e53e611524667ddae69041d.ico HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-megafi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 18:45:49 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 13:09:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 29\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6a0477ed-cde\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgCV6PqzYnd8CWMfMMA7tIGBZR96r5UNAHkoJbdG2mcswTR2SHCoOZEyfFBUePnR8RezKOIVR4kOJiYrwGsAYAY80mSYtv1%2BLdwxX%2FO1jBJ0WFmuOdIyeLWBlZbprhQCyfg%3D\"}]}\r\ncf-ray: 9fbc0feb4bbe712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-05-14T18:46:20.70526Z","times_seen":128,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/?m=2964640","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.217.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:50.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 02:19:25 GMT","end":"Tue, 23 Jun 2026 03:18:07 GMT"},"fingerprint":{"sha1":"A6:25:9D:4A:38:D4:2D:9F:E1:29:70:71:B3:2D:9C:3E:58:44:59:4D","sha256":"86:A4:C3:14:AE:CA:53:F7:9E:A6:7D:9F:5A:F4:AD:96:1D:70:F6:30:92:10:57:FB:6D:D8:0F:DC:C8:18:20:45"}}},"request":{"raw":"GET /?m=2964640 HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-megafi.com/\r\nOrigin: https://vote-megafi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:45:50 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Co5W%2FrdeH1TNPPb56YRa5tiUQqaQIPcr3S53rs3y1SKCy%2FcNx%2F2bWvj82R5H4zFQ8%2FKYvKAOoWkl%2FxybhXf6akfrqTMykbjxJv9a4bjEcUrrPZifY9abTjZxwGNtdyd1dpxmz6w5Qz3CJqJNdjhKIDJUZEmHjfDPiM%2Bpa20q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbc0febec39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3419558,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0fa9df53b39e9e8649f9e8e74297c4dc","sha1":"0f01c97160850c1bd1157a7527ce1fe0692b8dc5","sha256":"51b3c1dcf127e1107059815834ccf098b52b6811a7a9e8f1c1ab87acf0cd3537","sha512":"702fb965e372e5dcfe22f12773058f4c4d23c18f4c20e663428fbe872469c89c453de5b82f7a16e856b9a6f5a351e0017a70d5c2b127255b9eadcbd63e97633f","ssdeep":"24576:uV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdOz:u7OwPEZJsQz","tlshash":"c92533106dabfe6a0f4caaa574bf7e0766505f47858d24cfea31dac0047827501eee1b","first_seen":"2026-05-14T18:45:52.282387Z","last_seen":"2026-05-14T18:46:20.706098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":24,"dns":1,"connect":0,"send":0,"wait":620,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-megafi.com/secureproxy?e=jscdn/getFile","fqdn":"vote-megafi.com","domain":"vote-megafi.com","tld":"com"},"ip":{"addr":"172.67.162.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-megafi.com/","date":"2026-05-14T18:45:50.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-megafi.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 12:12:46 GMT","end":"Tue, 11 Aug 2026 12:12:45 GMT"},"fingerprint":{"sha1":"5C:96:F6:08:10:10:B4:19:8C:83:01:5B:B0:A8:99:76:A6:DC:F6:66","sha256":"BC:A7:3C:3E:87:B5:3C:98:6B:DD:DD:2B:A8:DF:67:DB:EE:DD:8F:BC:AA:F9:E8:91:49:CD:42:06:03:25:A9:20"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: vote-megafi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-megafi.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://vote-megafi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"i1ilq64kc03hl35eh0hh\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 18:45:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6TfADp6GirU3OAzlDfKM7TXDKE6GLB8dC6%2BRx47TXYSbsyj1LrUgHl08kRSwPOeGTtv3upC8ChxgK1McnDzLQdtUTSpVxyhUbSdE7usrKYfjQDu21BwmT0%2BWIfBux5jqAZswxY%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9fbc0febbbcb712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3427566,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92c0f466e44c964fa19e23cfcc42a440","sha1":"a20d65b2cf9bbf464c7e2908a1035290d8502c38","sha256":"d3a933a889bbbcaec3b4b6b48ef1d85df4836fd224ead243e1f054e5beb48d16","sha512":"03a0bb39581ab3f48938dce973b2d9f3b73445254b47622bf75eb2b801aaf28adfc8dbdacde553863887dfaa2318323291085621b63bec2c20d87766c989e8c4","ssdeep":"24576:7V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdu9Fj:77OwPEZJsM","tlshash":"362523006e9be9694f4c6ba6b4fb6e43a5010f4385cda4cfda21edc0106577281eeb5f","first_seen":"2026-05-14T18:45:52.278587Z","last_seen":"2026-05-14T18:46:20.707672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}