{"report_id":"6f2b41f5-9c27-444d-87f9-d7be71d06c0a","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-05-11T00:53:14Z","url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"title":"Flare: The blockchain for data","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T00:53:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-11","alert":"Detects file containing Telegram Bot API","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-C-IAdQFi.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":39,"received_data":16708316,"sent_data":20331,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"cdn-cookieyes.com","ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-22","domain_rank":9847,"first_seen":"2020-04-26T13:42:32Z","last_seen":"2026-05-04T05:06:49.392782Z","alert_count":0,"request_count":2,"received_data":5917,"sent_data":953,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-C-IAdQFi.js","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"md5":"a04c7526949328d2269b644adfb6030d","sha1":"beb63515bd409cfbc2435deeab905b0ea0b06a11","sha256":"990a0596d1fb0a8b4302e1cd13c2fa3da180d74577ee2f3370293d64877ff4d9","sha512":"71a6e4cf06eeaaf57d106dc691604b9ae20bad11424638acc652c9708f9dc1a580a17c9b0ab68418611103e7241336f5c699bbfdd6654f592e84cdb30188939e","size":1832559,"token":"8797625659:AAFP8U6a0I_78Ln4HsZ2m9j-mXSiX9aLnFc","is_revoked":false,"bot":{"token":"8797625659:AAFP8U6a0I_78Ln4HsZ2m9j-mXSiX9aLnFc","user_id":"8797625659","username":"votingwaysbot","first_name":"Voting-Way","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"576fa2633b88e2629d9897a679432ae7","sha1":"bcf85dfa150429c1c9adbc25e68ce6c8b097a473","sha256":"37b8b2057be2b125efbc117e40fcb775cec76b9acd8a125edf4533b3e70ea2a7","sha512":"bcfda02f76ffb7f27672287aed63d0f2a5da4f9386726a409f2c5acc4f0da0f76d7906c9e4f3ca601eb7a44ff967141bf1247afed81418689119ea6f5dd85bf6","ssdeep":"","tlshash":"6bc02b081527c47b431f6f4dd02343d4e5b020bedc492485b02d181806d0c313b40cda","size":142,"data":"","first_seen":"2026-03-13T03:40:43.815425Z","last_seen":"2026-05-11T00:53:27.96274Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89bfd82138d954b58a0c55c59388a9c4","sha1":"30c41d2cbe7ed51cda4a5f7c9d066228277ab592","sha256":"58d58986ec6356a499097dead04639eac6d0f952f4cb0d91f4457376e9d77097","sha512":"d0cd2dc2dea6e79eacb8b46c712d181ceefff504b78cd17ce0b28dccd40ff6353356759806340b20a79564c3b76d7785840060c81b57e011eb55324349af91ee","ssdeep":"","tlshash":"dea002b0b0824c58811708477835500a6fad040e11a80200333a809c9b221148f54ede","size":59,"data":"","first_seen":"2025-12-06T07:48:54.281245Z","last_seen":"2026-05-15T01:17:30.121761Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"836927e542707cded0a7ffb8b80eec15","sha1":"de2d15e8907ef7ec31aa2b966334942b06ae8190","sha256":"7a03f1ea27adcdd8211a5056d701d9e3d0dddce43b68f44ca52e4431d894eaad","sha512":"4335827a992d123bc878468246839fb5e0edc360dc8cb843d461b8d745704c76ae7ff44097e9e93eaaa934277cb19f879897b30222ca3ad95462f23d248f6444","ssdeep":"","tlshash":"2c416e8df505f8e57c62dd0f543b1e3490d9ed7a43b4809ce28ddea78262d7d4388886","size":2277,"data":"","first_seen":"2026-05-11T00:53:27.965033Z","last_seen":"2026-05-11T00:53:27.965033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bbac871b087f60ed09df9d6bc3cdc82","sha1":"c9772139a6dde53f1d4d09bcb944fcbb09545bdd","sha256":"a98519033c0400fe3633e6f4a022ae5a86369412a6b59fa4fc01afce12ba3bce","sha512":"96cab3754944c96eaa90a4e95e72104e2b13f128f4606dfed39155ef53758fb9331f53853a1463d2adb5458abd960b02b027ec9aeeb1726084d797e1b0dfdb72","ssdeep":"","tlshash":"3fa02228c080ec0e0332a80330322c0a00ace80e0b8c0200332880a303038380bc0cc8","size":73,"data":"","first_seen":"2026-05-11T00:53:27.966558Z","last_seen":"2026-05-11T00:53:27.966558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d16fefdf6daaf350eae2188c0081347","sha1":"89b75b5dd59837541959b94fcaf230c38349d937","sha256":"409a4f203717aa8fe6c1a1fe28ab858cb9000edbc4187b9d4b3d89a3cc7c335d","sha512":"61b8d9fb58dc3d5f89f472ee1ecf68f231d01bfaa8e00a97dd0f96d5c6991b58469c5c7bdc44ee72e1dc2da4a8201679d0c9f63016d61a4634e10cdde3049f30","ssdeep":"96:bDL7E7cg1xqzc/xmWw7E9ExqzTG6jzpNsam7TJPW9xz0RPL9s:3lgnqzcpmlqzuPsUs","tlshash":"c8c1bb2c7009dd8fed9a7d6d023ddd3b74cd42ae82f9a9b8468ace5407428792787dc1","size":6141,"data":"","first_seen":"2026-05-11T00:53:27.96818Z","last_seen":"2026-05-11T00:53:27.96818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87b64248d8c55adf200c93a70c96c949","sha1":"739d844a71013007df268f45a718e48bbcd2da66","sha256":"ccbe5f9259a48fd5691abde3e2a6b2db5af6242c0aa1e8dc5866d9a8665f4a22","sha512":"dc366e278ba6a5e95500b4c00d80f41e8b27ce9032f80f48488b6068ece2c72e8cf0e7edff37bcbd124232b70914e9158db200b584aad06d22560eedfe5f6933","ssdeep":"","tlshash":"01c04c75a048cc5afd29b957187e6e17105e405b4048af6577c8cf14079693e7741dc7","size":149,"data":"","first_seen":"2026-05-11T00:53:27.969511Z","last_seen":"2026-05-11T00:53:27.969511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0597294c8473b4ac14f9998339865024","sha1":"94630f0fde075db78c0dd412d1f2966ac99f23e2","sha256":"f164460e93f77902f3029477917e25218de7984c46af9d4bdd559d4c5efa237c","sha512":"925c01188148c6bf7353af332e9b919d3617c1baa4a239165cd67849d3de5f82436cf30bf7255e6e3ab64ed0c52093bb8e4537e9c07a73a116d114235dae32e1","ssdeep":"","tlshash":"c861fef9b40ecc69e84a7d8514bfac34348d125a01d9df70fadced04078297e6a82ec0","size":3284,"data":"","first_seen":"2026-05-11T00:53:27.970618Z","last_seen":"2026-05-11T00:53:27.970618Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f2cca74cfb1e54256b2bb13dbe02a89","sha1":"0636c674c26ca4b0a102e1ffa1ca027269e6c3fc","sha256":"aa64e93eed4d34c1d654d0e3e4f772771e670417b0ba17bf19ab1df64c3c2da5","sha512":"a939a80f245e275428c02e89cd114bad7564bb62492bf026d5a0217437398a4ef514cfd02669b3f8b0446d3e13fa54bea56ddb9baeb70a136b9ced328239fe64","ssdeep":"","tlshash":"86410cfa5be073e5e0c1e7e357ad60a83e3750f76853c914e3ca6e4d222248ea480152","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.971733Z","last_seen":"2026-05-11T00:53:27.971733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d27da804a56cb32ad2306bc6436ddfb6","sha1":"03d33eda80fc2d32261f1c3861c58c13e0ebb580","sha256":"80cc6ca9eeedd03e692e8e56404b68d17e921cfa43a03a736cac5523148e3910","sha512":"6cab393d144ad1226a6cfa9a10141706e1df830160bed361facda05693cd459cfbe66f23d8910a7aa4c7b7b54a1e3b1b66bef5b6c4d66b60ce89a90c52391fdb","ssdeep":"","tlshash":"e24104b8e3f172e480d9fbc21fda957831a792fb292dce19937c6b984b4781ca0045c5","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.972954Z","last_seen":"2026-05-11T00:53:27.972954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"59b59ab8605100443a930d35c9d89426","sha1":"1e12fec8d23c4fc63478e288e19c48c36004ed10","sha256":"7456d6390ae4e4514dd10efecef198ab2d4f5666de3996523894969bb8d9a6b3","sha512":"4be1705c0c2973343abd58fe8c04b90b23d089d17d0d5c4f001819d37c9a3957dc9cf3120d3fe07cbaf92bcf083a1ef21c312cb34f617ab239606edbac421688","ssdeep":"","tlshash":"38418899d7d273b484c293616fda40397cf7a5776927cc0cb3dd5accc64256da0864c0","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.973966Z","last_seen":"2026-05-11T00:53:27.973966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"132ef631cf1c7b12ecbb1a4f03c91bac","sha1":"2638da262c5831174234d8d82d9466282675c826","sha256":"0d13e95dc2a336bc3021e19c56a6846789421b916bf9094dc95064d3e28ebe0e","sha512":"ff794f15e2bab56f80ccd5a1c4676ad27f58ccdaa8c4011d29eff0fec89996550e79661080cdd61ce85f7e458cb37e7ce9c327115a25492056e59964a5c7835b","ssdeep":"","tlshash":"d34196c62b7061f947dd6fc1af43acb8a2eb51e51526ce0ee3c9cec8c56506ca00484b","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.975583Z","last_seen":"2026-05-11T00:53:27.975583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cda683610f2b205aa6ca8b78463cae6c","sha1":"ab7c038f2e61e56b77d2e6f50d0345dbb6c173d8","sha256":"c85a1c6a37675e3ae0bb16c46b4c966887094074fa7c6fa64d8c57ee67cebf4a","sha512":"eebf826bc2b75dc9a9f928fa7cf2d8115469b9448d0f84dcfd563bec944352377b421359b5b7a5bb5723aad6ae9f1b134d3678273ff72b64223b081577039864","ssdeep":"","tlshash":"e04164c533a161f1814efbe0ab0168681d7738b63e59cd34d7fb5f818a61a3dd85381a","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.976741Z","last_seen":"2026-05-11T00:53:27.976741Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfc26d856ec71f879690f1e15863ee78","sha1":"c36b672717192287fd7db8bcf323c0a0dada8640","sha256":"38ad21f78c904e34dfbe5279a15d0c34a38139157130234f1f23cb107283799c","sha512":"69e4835011f27dafb32185cb596d7b5685c9c4abeea9043998ff9b754c479eb38267f5e7d6c4b5d5635f1e4a79c9db74aa31b6c0a818ca9a54d7542c010c366a","ssdeep":"","tlshash":"494140a0a1e5d1f1a247eff2c6307879db4f30f93f86bbe247c68d50291540e8888c98","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.977602Z","last_seen":"2026-05-11T00:53:27.977602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffbca1c3381a725bb447b405c6010479","sha1":"d61a39b3a0c5c80b7d64f3b5e39584fbba57b500","sha256":"6e31619072e834287bad627c11061ae022a9fa337f1b65412aeb185c6d978424","sha512":"e8557707a8b4d5334a1a2a8b3cc0b23991ca65820a19b4908eb9eeb991ee69541658e0b909403a2126546323ff68ad0b2186b4fcd3ee7d832b6443a8f59dd9c9","ssdeep":"","tlshash":"ec41f4b497c6e2d0e05efbf58a09a976763f14b6bf06da204ad85e10cf1507d8084ca1","size":2087,"data":"","first_seen":"2026-05-11T00:53:27.978886Z","last_seen":"2026-05-11T00:53:27.978886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1574a8e16bfbabdcca0d7f0450757d61","sha1":"98f374f5d5182d3d4cabe1d0db602c144b197033","sha256":"8a451f14beb65721a94b4d8a5090965ada11bc7e655eba9c69f1ba75459ee2ea","sha512":"c4f59766ad51b1a3539983e12f2d6fa9119b257168a8e1e2b06bd296860bfa1035f715903d3ab5d8611e1b679c2420171a74050c9ed5337a9494cd2df6f7b9fb","ssdeep":"","tlshash":"160115f5e09833f89407b794452198326b6d3cff273a0a052309dad4eb42274ce8cca1","size":778,"data":"","first_seen":"2026-05-11T00:53:27.979775Z","last_seen":"2026-05-11T00:53:27.979775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5812876a937804f1b313eedb9787e36","sha1":"79db41499c75d9c99458c0c0860262eb037ca5f9","sha256":"6100bf79424aa6e1448d93dafb21590974d5cdfc57fb9e440ad1017c7f8222d0","sha512":"563121003f850a3d6d79d5045c5807ee77453f20457e33117a67b564ecbd886a42e1fc88f7f09a9ae0e71cc79d85970da860c91af050e35c99e675ae865aa61a","ssdeep":"384:3/sz/e4CRy4g9nu2S27NaorFQvPROrPY6ofoGTo4NS8TPhHHB2mHBW/HBDfHBuUu:weuu2S27N1BQvPROrPY6ofoGTo41LhIm","tlshash":"5da232b6f205dee9ec997f82053eac75709e11ab898ade71c6d0ef24818347d7946cc0","size":22804,"data":"","first_seen":"2026-05-11T00:53:27.98071Z","last_seen":"2026-05-11T00:53:27.98071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d23310ad4d6ed625fd5370526cadaa","sha1":"c1598bbc26cd237ea03772873079b2e5699d4628","sha256":"4f3a0085c3e1128a2edf21426dbbcd6d15159dc71fa73a825bed02310b567726","sha512":"9cde5a8e8490fa3389468763a3074ae7d400896c9208d310b9b782cef61ee98a0daff29c9a92dea557cb0550cfed0b9d7f6717d70dfbe0e534b5bd7897f8e8cb","ssdeep":"","tlshash":"eed02b90dc12cc1dc7576f15183b1c3921cdc16502895206f58dca385f81e300ee0d86","size":272,"data":"","first_seen":"2026-05-11T00:53:27.981826Z","last_seen":"2026-05-11T00:53:27.981826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"85c4089960f7bddbb3c93bed97e8f2d8","sha1":"177401c521137f0623d3a4e39a229b1d4cc043ee","sha256":"7184640fb7e705f05d2a9b8dd870aaf2a5c4d4ff12453e459690cf1edfeb58ce","sha512":"bf59913d22b831c6bcd5abf6ef6c2a661b219e82365549aac60dd2b8ff885879bf879a235634819aea386e1e8779febf6638f22fd195696f092a90e4d40cda91","ssdeep":"","tlshash":"1c5125f3fe16dd09c7869e08287e7cb070cdc3924196a5afb298ce6d40c7d346ae6951","size":2701,"data":"","first_seen":"2026-05-11T00:53:27.982941Z","last_seen":"2026-05-11T00:53:27.982941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"08897948cd2d9572488e778dac4c4411","sha1":"43d190fb4fdc6116e22d3ddc37dcc9283ef5c6a6","sha256":"6142e3391cc64b59f26ff6500fb41fbaeab794e15b0ff45e2db89cddeec1ac5a","sha512":"484ff913de3e999287fda160833abb020ef24d425a8d28fe09035a3172388583dfe2824570e09db76f51d9fa28e9d433757996d2688f3bbf510207490c8575d8","ssdeep":"","tlshash":"0cb01210e080cc538136b45329f4ed0170cc100f814429117b8b5d2b2f1007abe10a79","size":106,"data":"","first_seen":"2026-05-11T00:53:27.983993Z","last_seen":"2026-05-11T00:53:27.983993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f2ad21050cd653584348dd3409fa6f6","sha1":"37af46c45d1ccd86fce43332d1136635410fd136","sha256":"cb33b3a6779cc34a22b919b40252e72ab98ec0e3d9dd7243187daf30b5ba76d6","sha512":"4397cbda4b57268f0b58e0548e1c8eafadb8c8ee273e9cb4d1196a64194ff3baf495c3930657cf370b9d62cf76382d67c41dc094692991385bb96d3c17537c6d","ssdeep":"","tlshash":"f241276fba0ae75168ebde1b29730f368589dc33063de05cd04df96a82219be075cd01","size":2207,"data":"","first_seen":"2026-05-11T00:53:27.984898Z","last_seen":"2026-05-11T00:53:27.984898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b8eef2fc24b7601906a080d890b04e8","sha1":"fe90039a3121fc1145a1ab5f37707eb597f05c33","sha256":"6770ce56bc69a2686e1e3fbecb2eb76319d883b77bef87ba7b9d45ec7c7f617c","sha512":"5f4055546395c1601669659624bdc1cf75a731ab3ab6c085cb8102f80845cd4823f6898806f9b3da00616f81b01d1e94e3573d76a0b9bf41b558800e6a273663","ssdeep":"","tlshash":"0641fd66b24a233d8f8b0126534f15b2f33b98b532944610f71980a8f762d6a563fe8c","size":2170,"data":"","first_seen":"2026-05-11T00:53:27.985808Z","last_seen":"2026-05-11T00:53:27.985808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fae95b07560de116cdcf0a5e2b0f653","sha1":"f6617754b440fb678623504a3aa2c8e91124d77e","sha256":"d24ae628ae3639af1223d53136704732b6df4098f7bfdb0057514572d1d72b93","sha512":"1f3fda73fbdddf9a8793b28582f2fa1dfff31b704dab6f6af246bfe04ccc4ffee9561ec587dfc884fd04642818b28ad8ac99bbaa02eebc1184ebc2f7e8b384f9","ssdeep":"1536:ZXFGDcRLwW8xR/jLDDqtEPmrBs4rD8AcB:BFGQRLw9ZLDDCdBDMAcB","tlshash":"75933314b400f1deca818d1eb3be5c76ff56817d89e2a46d09d0c52a43b18bc5bb7b89","size":97448,"data":"","first_seen":"2026-05-11T00:53:27.987261Z","last_seen":"2026-05-11T00:53:27.987261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-C-IAdQFi.js","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a04c7526949328d2269b644adfb6030d","sha1":"beb63515bd409cfbc2435deeab905b0ea0b06a11","sha256":"990a0596d1fb0a8b4302e1cd13c2fa3da180d74577ee2f3370293d64877ff4d9","sha512":"71a6e4cf06eeaaf57d106dc691604b9ae20bad11424638acc652c9708f9dc1a580a17c9b0ab68418611103e7241336f5c699bbfdd6654f592e84cdb30188939e","ssdeep":"49152:t3cbSZKPQ3SzxtTqSfEMEPAyzmUan9Y0DyCb8207+c+RimrfLDmvJFO5h5nVyqjt:tevn9jyCb877+c+Rh","tlshash":"8a853b9072a5b47247d654e8543b1002f239ac91701d80ecf7ac9debbea98c9c57bf39","size":1832559,"data":"","first_seen":"2026-05-11T00:53:27.988829Z","last_seen":"2026-05-11T00:53:27.988829Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-11","alert":"Detects file containing Telegram Bot API","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-C-IAdQFi.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43bbfb16bd4fa3e896c8c2ee8fbe3dc","sha1":"3f544807a341ec75422ded45320f912c57467cc7","sha256":"610043561ed08a7f86ee26d47f67b4d4f9c80a418fbe1685e0d773d1acf259a2","sha512":"b8d5884b8d8b4e30e5c09686540a41a1b936bfaea2a63f7aa8c853607efecc2e174274837bd952d25f329a3014cabb5c37232abf878c7fdfddd5fe76623501b5","ssdeep":"","tlshash":"1d11296fb90aea5128e7de0b29761f36858ddc33063de05cd10df96a82219be075cd01","size":911,"data":"","first_seen":"2026-05-11T00:53:27.989893Z","last_seen":"2026-05-11T00:53:27.989893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"114f8b52857830bf424c32133b87a711","sha1":"c87dd42017c85850b0b89e9596b3eedb0ec184fd","sha256":"064b35c2824fb4cee40d63bf6c8622329b30809d7896e215abf63147eba2fe2e","sha512":"26a9f01d67a3987a5bb54f4a00efd03d2a12dfff345720debd7c47fc8a0f1536b369d751dc11813290df941ea237b800d57773e1e7eb2f507a86c3132f896fec","ssdeep":"","tlshash":"7771810873baa0bcf009fafe418258747e457ec57c63c466c2e22d59da9402c0ee09db","size":3588,"data":"","first_seen":"2026-05-11T00:53:27.99485Z","last_seen":"2026-05-11T00:53:27.99485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6533a08003494be54d2e44ddf857a992","sha1":"1ea175aed112197c7d2e24ddeedf795097532343","sha256":"388ba9fc56ee0637631e0083b0cb602877434367ef9c31ca30e18995a396ffa9","sha512":"421a8434a676dcf1f74bbc93a5b0ff4fb4e8e789c0c6f5c56804660e9e70836e5464d93d5b7db0221cf3b28a65c49737f8e869c5ab0fd26f1f799352e5b50961","ssdeep":"","tlshash":"3451cd38b062d9acec4a7ed5003fac5a758d41ea5aa5ce24c3e0de10858767cab42dc2","size":2462,"data":"","first_seen":"2026-05-11T00:53:27.995793Z","last_seen":"2026-05-11T00:53:27.995793Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d38168ceedf0b9f716151d80eed8fb","sha1":"9d6d329d924602479df1647dc5fbe5490264b5aa","sha256":"2504b60d2bfb919ac8d058390cbbc51956d96467a2375e45fa1a094f53d1eac6","sha512":"ddcacdc125c547c3f2c1d67d2c9f425f405efeb518302dc5c9321a9e00a238c29e890a3095c70f52d0995d4a78261ed5d82588beae80f4857be3baa79d96c660","ssdeep":"","tlshash":"bc316c347015dc5cfc8a3d4a287f9d39358d809e898adeb4d5e4de3086c68b8af429c5","size":1709,"data":"","first_seen":"2026-05-11T00:53:27.996599Z","last_seen":"2026-05-11T00:53:27.996599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b03796d8c535c06627814d12b34a442","sha1":"225fc3d177041f85ae51aa52d3d49ae5fd9359ee","sha256":"7da29a2089684e44a7b7e2820a6f6695956a8a9ad112c0f08ad52d202d9eb4d4","sha512":"f5a9d3820991fd0fdeba54f7029bf44e191b82e1bb85eb288a74a031bda9f4265c96f3262f0594a93d9544ccacd4c3c5293e1e8644a6a27081117a5ccf571dd5","ssdeep":"","tlshash":"3831262fa945f6613ce7cd1b64776f369689e833063ee01cd40dea3a412197e0318c41","size":1467,"data":"","first_seen":"2026-05-11T00:53:27.997626Z","last_seen":"2026-05-11T00:53:27.997626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0637790c2c8d35290ef2c8c313a77d2d","sha1":"31b6d5023b6f7a5f567351d674834e3c7cbd5f2e","sha256":"7884e0d8d6506c32dac53f06785b10347e217498e4bc7a3c655edaccfcb75830","sha512":"ba4950f96445897ba96c562f282255d70b56437f9a6f991c53b4db4b5c70fb5e82b5c79bdd7a510bacddff36b226dbcb494eb10047a51b3725c06b86d94a2401","ssdeep":"","tlshash":"4561daa4d3f88a07767780f9cc33e11d718423c9864946876ebf52b2d7620acb291add","size":3267,"data":"","first_seen":"2026-05-11T00:53:27.998597Z","last_seen":"2026-05-11T00:53:27.998597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"abff493c827fe9383ea73c3beb893f81","sha1":"0232b29ead90d09bf54bbf03c5e45f705e24d1c1","sha256":"315fbcb4a770c2b544cc0b5d9dca1cc991af50e63d42c1abfe3568b1761ed04f","sha512":"c6c763d4177840f9b35c933d809d86b86bb78ea5e12ce740025bb437149fd42ea906945de8e045a7041776e2862795dc71a8f815cd5f940db26eaf2da20acf45","ssdeep":"","tlshash":"1f11edb271e9cc64d2427d0d25b93c343798b6454dcb7267f99c6b2343d78f8865089c","size":978,"data":"","first_seen":"2026-05-11T00:53:27.99954Z","last_seen":"2026-05-11T00:53:27.99954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"619b3b4ff9d769255373347752c48860","sha1":"677608647c16b6da9301d86661d32cdc09b23e5b","sha256":"d246b8e6941ff98faac6665f45405963c554ca89aa302e0ca17dd6f0da447fde","sha512":"37343213b80f274987ae3ba245717bfa956503f903c417c3376e8f83cf7113dc9038106a433a91f410d25cc274edadeb2b6dc5a83ee30be7b8f1ce6c31092d88","ssdeep":"24:bqDM5Hmte8pHjm1wXY1Hv9Okcu1aatRpY191KHrzcmPro5Cf1ahNBuPVfpHsS:bsM6pH+wQP9OWzpgPiPHcuBp","tlshash":"51a19aa4c3f88a07367780f9cc73e12d318423c9874946976ebf52b1d7610adb292add","size":4766,"data":"","first_seen":"2026-05-11T00:53:28.00053Z","last_seen":"2026-05-11T00:53:28.00053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4272476866fc8e1b536c31eb595d9eeb","sha1":"3c64413af1bbd954651c47572ec12ed64adb028a","sha256":"bcbe5739ba5367c5060780afcca7208b9ee2ee829125d862b547af9f60fbc4bf","sha512":"6953061858a80fb5219c6ecebfec340c00a1f2649c346065564acf627cedb1352c92db002a98f35d7aad183f6badcd6c47c3a7574aee15c862784ad81fdacc85","ssdeep":"","tlshash":"9311d9d5c0b5cc15d1167d4818fa3f391898760018cabb32ef5c966153a9878ab01c89","size":891,"data":"","first_seen":"2026-05-11T00:53:28.001332Z","last_seen":"2026-05-11T00:53:28.001332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e53b82188df346d8dbd98c9db4b0d60","sha1":"4774c5a477e4a5c41bb192cc6f29c1f1283064ae","sha256":"7252c0427a28eb8c7bf1d219952ec82d3fb2bd2bb59e5f12438577408f02707b","sha512":"7ed8b40bde2c79617d6b9ef15003552421eb0e5a0b5fb69364468c89db0f69e48afd4c651a8fd7a7597ae44d85e5a750f3106bb2e07912a82b8f0d06a493dae6","ssdeep":"24:bqDM5HmtiEEdYlm+9lNE+0LatqfTAH/gQccsQ93QoRQ7hjsS:bsMu3lnlajsJIQlQUQl","tlshash":"e4917ca4c3f88607367b80f9cc33e12d719423c9874946976ebf52b1e7610adb291bd9","size":4614,"data":"","first_seen":"2026-05-11T00:53:28.002217Z","last_seen":"2026-05-11T00:53:28.002217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc2e203304fe5d1d00618994ee0b6358","sha1":"b3ce8c94831e5252a73d45f9b6f1c4af64c480f0","sha256":"f1a724785ebbdc3d3a489e9ed02f7452d599677e719d121e030322e5c0f2f2f5","sha512":"78f75bfcd291acb066e4322a46269c1cc30af2884a30c0ba05e48a51f9a77287f4151457e6a63d4a41a6b93fad61e9aabc255b82aaad6b41594884d6dfee8631","ssdeep":"","tlshash":"1611e3bad0a8cc35d6163c093d793d3c144db1554ccd7b22f958d65143d94bd5e90c58","size":884,"data":"","first_seen":"2026-05-11T00:53:28.003197Z","last_seen":"2026-05-11T00:53:28.003197Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"91515dff7d0da6b620630fb9174d6f3b","sha1":"cb0b05248122d3a8bc62b24378d3fe004a62d638","sha256":"4a96f1a1497707609cf84bdff759bddb62051c338b79c9db966b57fe08d7b4da","sha512":"0cad687572ad4eaa184ccc0650c8b77428fcecdad2f65144b786330d694550f38309ad787ede9e69782cfe5d5115a3901ce88b09b65ba93029d834eb346aeb9f","ssdeep":"24:bqDM5HmtXgV35gmnNpg7pnJ994hTJRSedJg7GIfgc1s+mVcmVt6B9QpgfcMegAfT:bsMzphNUpn9IdCf6/VHbpchs","tlshash":"75b166a4d3f88a07367780fdcc73e11d358863c9834946876ebf52b5d72106d7291ad9","size":5317,"data":"","first_seen":"2026-05-11T00:53:28.00408Z","last_seen":"2026-05-11T00:53:28.00408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"24163cc82e15689bfbd28621a44b35c8","sha1":"c041d895a958e07de9e8b1979fe2e5de6380b9f8","sha256":"9133ccdf9577da272312997fc6d2b5c49fcb1345bd4f055c4e2ffec6a06f70e4","sha512":"8e5a11a289638c2db6cbbb365f1d33ce5c9cab73dde83b60cc3d0a965e2f20c8b427087eee9d37a4fded23d12f8106c1eb3f190c9c34dea7ed11d94296c02673","ssdeep":"","tlshash":"1f1104a2a8a8cc58d4067c4878b93f3c358db02944da7617bd7c8226538987d6a60dcd","size":922,"data":"","first_seen":"2026-05-11T00:53:28.011761Z","last_seen":"2026-05-11T00:53:28.011761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b85d953fe4e8d31342f26cb46f8f41d","sha1":"a9a82ba9bb857dc427e223dfe3f3bf06a56590a8","sha256":"21f4446d7ec9bfafcf76619065bb2f4918dff3ec7493973b4bce39d9d316dd3c","sha512":"8365c8535766e35732ad3b06c437cd40cfeafb3935b64c83bea3527cd53358d0f781f96c55c50a169f6b8a6d88cc99cf3a592dc0ae9aa77e33df32fac88e23b6","ssdeep":"24:bqDM5HmtCZ5p8khj5p6nhv7d5KhrTmjSzXtCc9Aatqbcv2nzsToeNvfqaGcR5Ppv:bsMzaLgJTDld2zXeJq1kBAa","tlshash":"c191cca4c3f88a07367780f9cc73e12d718823c9864946876dbf52b5e7210ad7295bd9","size":4270,"data":"","first_seen":"2026-05-11T00:53:28.015633Z","last_seen":"2026-05-11T00:53:28.015633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e8f36d65dabbf25412db41078ac2a4a","sha1":"a95415342aa35ef87b7b2d99664163e95013b833","sha256":"cd9f4e198ae52a0e98b2806105a6c300e03f532afe5a72eeae1e230c93a8790f","sha512":"bca7c4df93b78a734bc0343776bd3e47f6b1601968e84197753a772d851bf91e2d4de72e7c6dd1b12eb0aa43691a6dc9a1d828b81c259c9c4ffd0a86576839cd","ssdeep":"","tlshash":"c01110e06048dcd7e9135e0868fa3e3a91bd7c5248c73731e658a29a66af07c1b6844c","size":956,"data":"","first_seen":"2026-05-11T00:53:28.017797Z","last_seen":"2026-05-11T00:53:28.017797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fbdf0814899acb5dbc44f702533d5aa","sha1":"b82f3a8de7004fc639434aede5a55b6af8385404","sha256":"1331a122f5f8d195334dc0c3970d68d073928554485edca66220a0da1b7dca66","sha512":"698ea9e5659603cef4e3d8d245e5b4050195e9755326ddc3affb296781a97aa6fbdffdb50f5c75ddded92ff1aafc43d96a0cecb6c288b7733bd2e1af8bd15f7b","ssdeep":"384:fde7ihDM8er77t5xB96e93aUQ53pn/uBkwM3i6gpDDt6lURv1ioLao/d3eW:FgihDM8er77t5xB96g3aUQ53pn/uBkwf","tlshash":"2292b63bb010f05ee541be6e13761c76be18807e44e2a87d46d5cb1981e34b9afa7f06","size":20402,"data":"","first_seen":"2026-05-11T00:53:28.018883Z","last_seen":"2026-05-11T00:53:28.018883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2832302a8cec02c1938ca80e8269522e","sha1":"862d0f0278ea36d38c0b760ba0a6010de8c409b8","sha256":"c73896af9daef039990febc2502b859663d969b2193153fd5ca1c035feb2afc0","sha512":"666366cb066b3684425f7fa68b84089382ad976bd41b5ffea83a6a6013103beefa0ae81ced39faabbd1a9b3bf83d1691fc7789aaca9915c7e1a4db97ca5dd5f3","ssdeep":"","tlshash":"1c213a64ac15dd2cf89f7d492c7f9d3a745db24b8584dfa485e0e93481821bceb839c0","size":1162,"data":"","first_seen":"2026-05-11T00:53:28.019834Z","last_seen":"2026-05-11T00:53:28.019834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75ec058c032f146869ede91484a319b2","sha1":"d0b4cca0caa18f74847f97add9718a5de55e9739","sha256":"88467da706d21d7c8bdd1fd98b00a6909f8227db171a87b101ddf51d208baef0","sha512":"445906d792d1a07614f113d71dee4ceb0485f0bee57b67f1543c5892e63febace69dc2be4d4c675779616f7644debde7b46b6ec656f4d21a99a65543c8df01e9","ssdeep":"","tlshash":"034184fae748f2e0a88bef4619125c31a74e38bb173dd549831cd991ca121bc878cc50","size":1935,"data":"","first_seen":"2026-05-11T00:53:28.022565Z","last_seen":"2026-05-11T00:53:28.022565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4218411aaa0749c12bb3acfcceb3dc38","sha1":"3f8ffc81799e09a7de7f7682c004a52b09e090bc","sha256":"35d210ac84c80029b08d11365e8e90247a06bea40830d24eb827ffc5797b9aa2","sha512":"0c0f5e39c34767774e3641a89abc8875c9afd6a3ff60c966e5ca04344e2074913617072a62d71fc51252014d21a6de946f621a4e44ef92329daa809f583eb1ae","ssdeep":"192:v7mZglLZTiBhjpVSvel1LLd4ZAZ/qZLZS:v7MgltTKJSvel1fdum/A9S","tlshash":"7322bd76f101c89cfc472f1b903e5c3a225962ba6acedd74c1e1fa145581838abf2dc9","size":10332,"data":"","first_seen":"2026-05-11T00:53:28.025287Z","last_seen":"2026-05-11T00:53:28.025287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25031f24c0a2a72c914cd63e0c24f85b","sha1":"f28dace042a1a11ec4caa90b1daaf332e1a4f0a6","sha256":"84379ebb31178661d1943c0f6cb6be8baa70440d492c2574ab0dc3f1a54beceb","sha512":"d3e01ee175d0ffe5c327011844f485e21ca091b0b9d3e90c8b5a5180fbe380e5378d54670cc1124627f071c8160256f3117e6231870af2eb1722038106a03a15","ssdeep":"","tlshash":"5d019ee4f548c91ced1b2e57013c4d27e06f21971086df5182d5ed48e51257d9281dca","size":682,"data":"","first_seen":"2026-05-11T00:53:28.028977Z","last_seen":"2026-05-11T00:53:28.028977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ede8ddfbd42ac0d5e35b1634b384842","sha1":"93eb3fd20f8e78c5615ff957196fe19c942c1dd0","sha256":"b897801cb62b0e80cb96c1d2e103e986e7e7a9dca8279d301db2232e9c3ba672","sha512":"85b156217669738a269bb775492cd3776403630506177e3e091b407078f0604a734fcc43be7d2944d10cfa9b75189b45916d8e407f67e23631d12db85b9c9e24","ssdeep":"","tlshash":"c7e0226eb7b519b00233b33f470fb7a83623408760098e997eec4ac51fa491a59a1dd5","size":420,"data":"","first_seen":"2025-09-09T19:12:19.83Z","last_seen":"2026-05-11T00:53:28.030055Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/f46cde57897c3c3e.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/f46cde57897c3c3e.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3060\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"35d7c126e6925cb7829e4ac87515068b49a6a54c9dde0edb378f301f80654ab0-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.877089,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22870,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (22870), with no line terminators","md5":"e666eebcce8ca688c4685e3c2bed1e4e","sha1":"3ef527eeae5fb50954a239bc048ed0c88f770893","sha256":"a25f4a2a6873ff612c8fb73568f5e61bcad9d7753b5064f1a59939068e96436f","sha512":"752997196782737ddfc95cbc77a1fe737f422b1d842769873c813431647b174d4cbf0368f78a2fdc197ac8a6a2bf060eb43ac7f9b63340732c20d85df51b6856","ssdeep":"384:dcbXQqXGX5kcCf8UcAwCpY6ftd/qJJy/X4xZSXzUL/kjq+5revx055K6cWlFAai2:+bXQqXGX5kcCf8lieZXEa2","tlshash":"11a22e535e2af86cf03f0416e2c179287a00a827a65f55f2ee43dd1dc1de2d31972b8a","first_seen":"2026-05-11T00:53:27.894144Z","last_seen":"2026-05-11T00:53:27.894144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/assets/images/close.svg","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 00:12:14 GMT","end":"Tue, 04 Aug 2026 01:12:11 GMT"},"fingerprint":{"sha1":"51:87:5E:C4:73:62:87:3E:CA:6C:BF:CC:B8:64:22:7F:AC:4C:43:8A","sha256":"8A:46:D6:8E:FE:D0:55:67:A4:13:40:28:02:3B:35:A0:2A:BB:53:27:EE:47:88:5D:F4:AB:CE:F3:BB:53:D2:56"}}},"request":{"raw":"GET /assets/images/close.svg HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Mar 2022 04:40:50 GMT\r\netag: \"541-5da3a66c769d4\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=36000, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\nage: 506555\r\ncf-cache-status: HIT\r\ncf-ray: 9f9d33f7bd93b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-16T21:00:03.622793Z","times_seen":67034,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":36,"dns":32,"connect":3,"send":0,"wait":7,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/Arkham.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/Arkham.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1652\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"426e7ac6696dab50c227fd83a9281d1fd4384b09bc752453af7fb1b7f171112b\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.244515,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f931f5036e2902f0ea2ed199ceb772e","sha1":"40a5df06dc1fbf155dbbd95f3193dbefb3c70ed2","sha256":"2b99ad22545742a421f1ab0bf14700111ec6c3e0d75898d9fa13827aaa415613","sha512":"4d7f2ab2d84effea446962fb5e101d3c3e49dc8f19ebb3b81b616e84111b620b3454448cc083229427f324bed6929b2a2887f7bf6d203ba4d7cd14c58798ecfe","ssdeep":"","tlshash":"0731180a4532aaab916b910a8938118980caf1792b212a5b2d372298c90eeea57d3058","first_seen":"2025-08-11T21:39:04.762048Z","last_seen":"2026-08-01T08:37:27.681728Z","times_seen":40,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/favicon.ico","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:49.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1621\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\netag: \"0be8eec49bde2b06093f6fdfe3c19899ddfe6e61f34e9e92681feea6cd670800-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:49 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460770.720714,VS0,VE122\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 48x48, 32 bits/pixel","md5":"eae3a8e9d75cbdb2cf40c26d84b477ef","sha1":"3a3adf9adc35e1c4b04a4d96ea17bef7d7d7fd20","sha256":"65715321bfc6b7ec3243e6d0ff01a70dbe9947d0f2d2391f063356b82a796198","sha512":"eebcdbbe472cb2d94cb0b896d108af4121013dbb0f21e9e484bdc54c9a0e1f6af4d9336b8dabf29b5f97b0032a7eddccf2d94348f6d7747d1458bbd0cae12a4d","ssdeep":"192:jKcUBBBBBBBBBBBSGp/fmoNMaw9MpDuW:jL1Gp2oCau","tlshash":"4262f385050f4a1bf5a781fa711de759e5bcdec6e3fb20035d09b22a217e69290fca07","first_seen":"2026-01-04T15:58:18.01473Z","last_seen":"2026-05-11T00:53:27.904341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_providers_desktop.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:50.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_providers_desktop.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1267259\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"316eaaa7326e5a2a708a66982b5a0c72c5136480aa6354b09bcebc3df42e9e6d\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-1267258/1267259\r\ndate: Mon, 11 May 2026 00:52:50 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460770.122369,VS0,VE531\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1267259,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"ee2f09b30522d734be219fea9eb6b652","sha1":"6b2d4a6f78be14a1c1ea569c5c160396ad19fcd1","sha256":"802018a8d524b7c30540a7897c55ae1efa17f6ccd142e02d799c8480721e8449","sha512":"14b541f6615eea0028ecae7f55241185ce41b94a11f484602ae5b1934da1d3b8bb3960caf46ed1b8a65c9053444b70c00d7c1c5c6c1e59dd468ee60ea950b6ca","ssdeep":"24576:5JJ1VbEOGs0BDMeeobFxHYENSOAMma9tj9/e5gbIjpjMqZ:5JJkLs0CkbveOHNjogu","tlshash":"6925339d4ccaad43f09d84f9ad2442cb0a510b9193c684bad5bd334fc5b32eeb6751b2","first_seen":"2025-08-11T21:39:04.769941Z","last_seen":"2026-08-01T08:37:27.74114Z","times_seen":40,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T00:52:47.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"136d5cbf647be021be5eddb0d9f85d85706f51b999895e49d12db15dacf8d293-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778460768.711879,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 57791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":446434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (585), with CRLF line terminators","md5":"ee7bbbd3be2d5a5eae46f134477756da","sha1":"539b9ca2f574c6b1102223e0fc4a3ad4cb30bb03","sha256":"489478cb3df67961b4d122544f114d95ab89d83f8e9d454e9ee0fdf419f8ad94","sha512":"d815ae70f018b11b2d1a0506a3d273782d947058622a0ab95c45bbac890760fed8df94d41f0518d10564d97dfd8c3b9070143c4a49a480180ed7e8927eb388eb","ssdeep":"3072:AWCNtWMVWi1pVcmaPfD0FGQRLw9ZLDDCdBDMAcYXsq7t5xJq54jMy6yDDaqTF:AWCNXl10PY6ViOKB","tlshash":"9f940b70f180e19ad4239bddd67f9c3afa4501fb814289587afcc7768bb147c1a53a88","first_seen":"2026-05-11T00:53:27.909336Z","last_seen":"2026-05-11T00:53:27.909336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":56,"dns":25,"connect":13,"send":0,"wait":14,"receive":16,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/2e4c1c42751ecc5a.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/2e4c1c42751ecc5a.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2355\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"2df82c4cd4eb7d34935ce3f8969366caffbf39ad5750b397b26dab6f66d3ff25-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.877790,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13928,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (13926), with no line terminators","md5":"63f13644905963004fb0c0ff0c1677c8","sha1":"495989e236484e20bd1e554a4064d47f7039953a","sha256":"44d60c6e8e318ff39b7c72668caefce7f26d2297f283dceaea96437f4c854933","sha512":"2180874f94817233fa5003d1965e73478a0f8f91b5ef10a379dce9f30f7c287eebcb30d29a451d72117aaca7254b519286bc0035c1ccf624545a31625cc7a2b9","ssdeep":"384:YDAZk7abiK9tJsFtCmY+zOiLoqmyHHSpjpZVuZc:vruS","tlshash":"0a5203626704643ef43b454fafe8b4d8b30adc53a67f4fa5c911951dccc72ba0e62a48","first_seen":"2026-03-28T06:27:15.140181Z","last_seen":"2026-05-11T00:53:27.913643Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/d4cb323401af842b.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/d4cb323401af842b.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7688\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"42495eab238417acdee2b485313d6a3a2a89be086c4417505e826fc7302af58e-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.878646,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61927,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (61927), with no line terminators","md5":"81d603a47edc54985db8731cfdb23f36","sha1":"000c54a877121839853021d02ccf752310bd2c6b","sha256":"65668392a2ff6973c5e3cf1009fdbd8d25d50b7475b97f60f69030a8733d0897","sha512":"d733f8d52661ea436d72da1b14f270be5f58c506e0627abdf9765f255b43884322072fda1d9a1ce72156028f9e55dbbc6da426ea19171b689484cd14ee6e0a6e","ssdeep":"768:O5XjssYhiB0hdhk82Rzfpy3ULT90v+Qq5:u90v+L","tlshash":"c95353636a65a03cf07f0916e2c0751db614d463a74f06f6ea43dc1ee1da3e31962eca","first_seen":"2026-05-11T00:53:27.917621Z","last_seen":"2026-05-11T00:53:27.917621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/1952e8db88928c98.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/1952e8db88928c98.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 358\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"c56ffa06462fa7a20d3b7b939bc52d48b0eeccd7ed95665acd2f8cda7dd5a23d-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.884774,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1505), with no line terminators","md5":"d94ff81c66217097ca6bc1923919a71e","sha1":"f58a63add5c3e77c16f70341c1769dd348f09503","sha256":"3bafbf7efa7f785b0a2e689e6945b7552a075efcbcf5c4576a5a049883404294","sha512":"8071f5ef59f01e359a9f8b2a02fbeb9f9589d55f3614122a87b1b345b348b75abfed6a03a6646bf26c93ce3ddac9d83868fc67f6ae3d9eadec9cc4907b5a9915","ssdeep":"","tlshash":"fd317a47cee2d015f09f95276dc12f84e1134be39c9a8a3299e3ad0bd5c64793f01688","first_seen":"2026-03-28T06:27:15.130055Z","last_seen":"2026-05-11T00:53:27.919512Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/30a1e04d708a9bd7.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/30a1e04d708a9bd7.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4094\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"1bf1e5bf63c97d64cd3d5eefe016967de46808c08e31ab700ca7fd6635028304-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.886726,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16732,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16732), with no line terminators","md5":"efdc05eb7d3bc4b46d9a622765d893c0","sha1":"526edfeaea172390332034a91c91ab5469c4bea7","sha256":"73b9392df35a4ca5b7ef2b3d327ec6a1b5db7aa88e80f34f871ac570479cf966","sha512":"2b68863702a4bb8281df19e17c26473eb93a396f2ba0b4b4bc3fd786f945ec9ad720a7d1492c4885f603f8cb60177984637f5001b6c2bbf5742f8f1f33bb178c","ssdeep":"384:/SL7F/ggV43UbeTJndKW+SdSr3nt2WoRWfs:ilbIJnLDAntpoRWfs","tlshash":"a37254a52310581793230e3207b19bb8ed74489247d3ce7ed5c1ad58c2fb9ba172f2b9","first_seen":"2026-03-28T06:27:15.084957Z","last_seen":"2026-05-11T00:53:27.922366Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-C-IAdQFi.js","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /assets/index-C-IAdQFi.js HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 410826\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0c26be450cc7f7301cf2bf6376a64ef79e5bf3a2e531aef389bac477b755d197-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.888975,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1832559,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63885)","md5":"beb24a91e40644131be5437804eba113","sha1":"8acfd072350cb5239cbdf9af3df756f133bf5485","sha256":"31e2f4e0843b691d6ff840ba16c8ee98238a35d354370063c3ff48be6afbcfb0","sha512":"b6a65c2e5033de6ca8e4b803f0163bb5fe3682d91a089c553e083f753c97775f9d3f5c258c5a766c4ed53ab5e926436214efaac9eb6b23b0ce6507435f59e40b","ssdeep":"24576:tN1cbq1ZKPQ3SzxtTqSfEMEPAyzmUan9Y2PDyCb8207+c+RimrfLDmvJl:t3cbSZKPQ3SzxtTqSfEMEPAyzmUan9Yf","tlshash":"c6255d9072e5b03503e655d864361102f2389c54701ec4ecfaec9debbea9889867ff79","first_seen":"2026-05-11T00:53:27.925689Z","last_seen":"2026-05-11T00:53:27.925689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/742e15aa27ab2f06.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/742e15aa27ab2f06.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2834\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"32661c17d7e5bc6069455a45ad2751994636e584b1bb8c76c4377b8acbcee11c-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.879905,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":18258,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18258), with no line terminators","md5":"db7fb160a9427d6b394100c1f983807d","sha1":"18372ffae6829539933ae62fe4b756e08734e587","sha256":"b1a65c506e5e1f3892917af8b68c2f71c97cd1d3fa514aa8bcb5353d3ba01a1f","sha512":"9125fc8e9026db5a883a4385eac3b4df237841c244654f893c7a86e53854afebc94332330793e0baa69f220928cbcb394e7596966f91613652ce05438ba5e754","ssdeep":"192:I91s/IMMhP+KqR4Rfyf502L8ZXtRLw5XMkpCkIZ2kQ5nEBZW53AoZ+hd4QgwHpBw:I9k6KA9NEAd5Jk8DUS5zibqc","tlshash":"508210336f10e41cf07b849ae1ca75d93a06d09be55f06f2fd42ee0ec1cb6a31966649","first_seen":"2026-05-11T00:53:27.927549Z","last_seen":"2026-05-11T00:53:27.927549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/media/684e5662d94c69e1-s.p.woff2","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/media/684e5662d94c69e1-s.p.woff2 HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10132\r\ncache-control: max-age=3600\r\ncontent-type: font/woff2\r\netag: \"7065a17c378df6220dc1745df4add32fcce291b8dbc6ec4b2175746bc772fdad\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778460768.888441,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":10132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10132, version 1.0","md5":"a1e11d00feb82d3b4f7cd3f2f7c26d34","sha1":"cd76209a05a8d42204222ab675b44d65a84f7709","sha256":"7cc6a8cf805d59d3a7b93b9f7a076fab2134d53413715eb4f891cd55a765f3d7","sha512":"c0d49c884362602bfe95d82316869ba8ed89fde04ac0184601c0fd378bea3c01a8eaceeaa6101efbbcc82a321459804660b4aaf59310299d438b1af0c4093493","ssdeep":"192:DGI0Zbz5JzOg+i6k1MJcFaSzRSxKm4ZqKYAjJO/neg7X8+R0:DcbPRv1MJDQLRJgnlb8+i","tlshash":"d122b052706884ddb76dc6e94f6f0bff6794a2c61602dd0fbceb7536246210301155bd","first_seen":"2023-07-12T17:25:23Z","last_seen":"2026-07-22T07:33:46.393624Z","times_seen":144,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_hero_mirror.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_hero_mirror.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 6671128\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"094cdf25ad1f1164293eed1f7462ad27f0b744f4253dee54f538e8d8128f51ce\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-6671127/6671128\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.231414,VS0,VE485\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":6671128,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"8ba3b4b6d2aac52753898eedca3f0922","sha1":"798a922e7f2004eafc8b4e67a4a0b7e7ced22af0","sha256":"46f44cd4c79381d1c7acf5c19a86f93fda26d8def853629dbc7e2b23828b2006","sha512":"142af7661de1f986fe11d3071ca0f8f7bdd218cfbe4d622d5262ee268b90de94d85b61c3aa29374707ef66d5723ca790415a2ea092936d2c5bdd32d7116d7d85","ssdeep":"24576:XPtI+0OEe31zEz2fTJbRQv34jPISM+Kt7Ww3EB:XPtIXOEyxE0qIoVNgB","tlshash":"832523c014456dd5d846c7f1e9ab75f11722b5af83631aabb3e4af06cc2e40c780e6a3","first_seen":"2025-10-21T19:21:03.453971Z","last_seen":"2026-05-16T18:03:41.18589Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":984,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/city_ori.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/city_ori.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 262032\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"70bc16b1000de2e97629113fb495279605201e220b34656474ae66bd6daef66e\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-262031/262032\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.233170,VS0,VE256\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262032,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"a51f5d83c91adbd04ed54a6b5479ea81","sha1":"bbc60e6eaa15ec3083c4e7dfddddfc52927d6be2","sha256":"63210defbb886035555e53410789cdc204909047a1aa139ccd2abfb78d20b0ba","sha512":"bba08f3a88d355eeaa622bb29f864057f71b6b16034f84d3acb4efde3b8fefc7491eb6f20777f8bc651709ac494f0423820f2dcf4210dbab68a7522d7d83e35d","ssdeep":"6144:rd9H6MksUSF1qtWswBcgN4+F/McVr7yZVArUdBMLbi4Acq:r3aMsSOQswjN/RMWHBrEBEbbHq","tlshash":"ce441211ccd6fa67d84c92f1b23e065e8494805fa523d3452db7f01ee67ab8de90a4b3","first_seen":"2025-10-21T19:21:03.381512Z","last_seen":"2026-08-01T08:41:17.496234Z","times_seen":33,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_fast_desktop.mov","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_fast_desktop.mov HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 446434\r\ncache-control: max-age=3600\r\ncontent-type: text/html; charset=utf-8\r\netag: \"136d5cbf647be021be5eddb0d9f85d85706f51b999895e49d12db15dacf8d293\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-446433/446434\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.249371,VS0,VE288\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":446434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (585), with CRLF line terminators","md5":"ee7bbbd3be2d5a5eae46f134477756da","sha1":"539b9ca2f574c6b1102223e0fc4a3ad4cb30bb03","sha256":"489478cb3df67961b4d122544f114d95ab89d83f8e9d454e9ee0fdf419f8ad94","sha512":"d815ae70f018b11b2d1a0506a3d273782d947058622a0ab95c45bbac890760fed8df94d41f0518d10564d97dfd8c3b9070143c4a49a480180ed7e8927eb388eb","ssdeep":"3072:AWCNtWMVWi1pVcmaPfD0FGQRLw9ZLDDCdBDMAcYXsq7t5xJq54jMy6yDDaqTF:AWCNXl10PY6ViOKB","tlshash":"9f940b70f180e19ad4239bddd67f9c3afa4501fb814289587afcc7768bb147c1a53a88","first_seen":"2026-05-11T00:53:27.909336Z","last_seen":"2026-05-11T00:53:27.909336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_providers_desktop.mov","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_providers_desktop.mov HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 33297156\r\ncache-control: max-age=3600\r\ncontent-type: video/quicktime\r\netag: \"5d59aa6c18da4bb3bf69698ab21f4e02a1585ba4932d7b49738007cd4bff15c5\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-33297155/33297156\r\ndate: Mon, 11 May 2026 00:52:50 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.251017,VS0,VE1827\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538255,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"2e7d13f0703389107362b4321fd1c3cd","sha1":"70c53979a120d2bc1e20112bbda78395b2987341","sha256":"7edb3456fa5e9380fd0d0d2e26dfd7eaafc1cf5822136cea44c78739fa1f8c7b","sha512":"c8d78ff204590428c743e2adf2af09db1daee9773cd494c0320fc46f3a2ec2ef7d803a771a19b19293c1617d26db36bd64f1c64585b7864b53179a0f12480e49","ssdeep":"96:4zAdmVaUfkkkop22ogW73Yh44MPRmzTOJTGgHiAoHiUYnM1zstmx:48dCkkkhPRiOBpdoM","tlshash":"f9b45529ef203891e14c78bb58e323069a23c1d7a6c55f55b9cf88049f713e16e276cb","first_seen":"2026-05-11T00:53:27.931547Z","last_seen":"2026-05-11T00:53:27.931547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1841,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/Flare.svg","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/Flare.svg HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 418\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"ccc41d281b9cf6f0218b5de07315f20c79975fde1c952a74dd42a191e06d3d1c-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.876584,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-08-01T08:41:17.478958Z","times_seen":44,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/7ba851d11fd230a5.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/7ba851d11fd230a5.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 819\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"d755f73c6fa769d29b9fa5d798a87b627da4d51489134e6c16461da29b029ded-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.881333,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4206,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4206), with no line terminators","md5":"f6b04315c0163e0d966015a4e2929abe","sha1":"31aa1fee41c3d39e8afce275a0ef32fe80139e84","sha256":"5a8d2e859afdbb26d489f406a30877cdca1070085af91ff47b208a33b1fe60c3","sha512":"31214a68257b0a0246eb43097cf7e1bc32f058735996e9c396ebd667f9abf6f3473130a90a2b217139750e4994d9028e9ce3bef421210f31d4514540b1291d11","ssdeep":"96:NihyA3yxdiAANhAT57DdIvyE2AH9k2fLxYCWZ2:IhyA3yxQAANhAT57DdIvyhE9k2eCWZ2","tlshash":"d9918d33e635e024f23a4d53378079993604997b649686b6df53ee0dc9e36732613b48","first_seen":"2026-05-11T00:53:27.934368Z","last_seen":"2026-05-11T00:53:27.934368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/387dc210f1201c0a.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/387dc210f1201c0a.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2318\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"241c417151a77752f79ce3c7a5d19aa296c7610c615387279e538e192a32af89-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.882512,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":16051,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16051), with no line terminators","md5":"f7e2f3c15ee92123c1a155c678cd0beb","sha1":"031cf399ddd9bf1ad9b0375629f4a3645b6e3170","sha256":"321be11ff32960c4fb0593aff010c4976d8c0cab584dd8ba37ef24530e592d4a","sha512":"fc9a753ae83d0d807171879bec5973e12690fd6cda51e59624b8058579e33f8cfbd7e78db06bbd0e9efc8056a9dc6572d2f5dd94efeb8d71a5b084552746ca36","ssdeep":"384:/z9Yluz81NBd1f5lNtzVop1B3BQE8iGV3i8:+yzBRUL","tlshash":"dd7264838a381c78f2af01327cd4b95a6529443ead9742f8f953e5595fcf2aa162360c","first_seen":"2026-05-11T00:53:27.9366Z","last_seen":"2026-05-11T00:53:27.9366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/media/d9396795aa5ec363-s.p.woff2","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/media/d9396795aa5ec363-s.p.woff2 HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 42534\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: font/woff2\r\netag: \"c58cd7a98482e3c0cb46bf336105a1a762c2c77dff1fc404600144644f5d1df7\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.887276,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42588, version 1.0","md5":"70880e42f07b0386e261974cd14820a1","sha1":"2d34d398b398a7fd88d21fae7642cdca908bf3ee","sha256":"e739aff9b4d02c264341d6d4872edcda28e79373aeda936f659566a1cd3eb47f","sha512":"6a5cb0cbee5f49a4b96df82bc37f3f2aa7abbc8fdb304962a3f492c7f63772b81e753a86e01da2a7a74785cf3196795408065e0bf30695166311e324d813d83c","ssdeep":"768:LRuvvUK4d5TnqQ8Wd3PDjhbDERazTlYv2zypgb0Sj0a7OpBUroBTy1gvK2jbx:9ukK4rzn3PPeRElO6ZVj0a7O/3g1IZx","tlshash":"d313013c8972d7b2bddb203b7cc0b6652494576962b0b2bec096093c80a467db18f733","first_seen":"2023-06-27T05:49:32Z","last_seen":"2026-08-16T20:33:02.018861Z","times_seen":2652,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/ankr-1.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/ankr-1.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1504\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"40d590f14b54ee36cf149193b17af5499d1c64c9908e9d09058e16d768dd91b5\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.241784,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a99529b73a19efaf2d7e028cda1c9b","sha1":"87f011fee23c56de730cb79b6ddf36a7f5ed92be","sha256":"794f63b21ecf0941b26436e18d536c830abcbf5332832baaa53821f95c5b87d8","sha512":"8c7a72c51cd3b350d1e0e8ca3de82da58be817b6603c47f6f5d62acefefa894dd69176cbd2f0179e8d1266bc40b7e4c0fdaf6ae0166f193449241f29856a779b","ssdeep":"","tlshash":"c331d78a3b637026e10c053831cc1122622048143a29bc23593fb4f80420691e5badab","first_seen":"2025-08-11T21:39:04.736165Z","last_seen":"2026-08-01T08:37:27.772837Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/84e84e766565f2be.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/84e84e766565f2be.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1444\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"9deb9019ba52b0347622a0f409408d1f339879bc299d2b5665fea0d264cbe56f-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.883215,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8990,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8990), with no line terminators","md5":"9ee23bb9ba82a94db57076616c8fb38f","sha1":"79211932668c2cc8ba4a96c88ee3d238b066d7b5","sha256":"76aec738d7804ee78b181716233f2dcaba9b63678393767732e65424e57b5a8a","sha512":"da80bcbca95277c346dcb34f0deb483f7ad33af155917d94667dd98a4b68f4c4a8ac3f731500a81d9e19f5f874d904c686f53434329bcb88e1afb2e9bd225836","ssdeep":"192:eU4f5YfkZEayCsvzQFi0TER/sey2tK5eIZ43Ynz5PbgRjPqlbK:eZIayCsvz+ER/sey2LvYn1PbaKbK","tlshash":"60020d676f1ab47cf13f996ac0c0752c2644d14bdb0e02eafe02e55ea5cd39b2932d46","first_seen":"2026-05-11T00:53:27.94189Z","last_seen":"2026-05-11T00:53:27.94189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/080443f751433e96.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/080443f751433e96.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7098\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"9b35cd834b585e5f5863082f7dd639a6d9a0092d0331ad682316af8b92844bc3-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.886063,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":61680,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (61679), with no line terminators","md5":"dcc5174ac40f71d1fea9bd6c3cd4b275","sha1":"7493be02a68a5e1af6b79eb0b12b4e54f7616a4e","sha256":"b05359d6f12b85ba9a03f5eed32a2c22558a632d70d760fb1d1e86bf935a9cad","sha512":"0562e084e08ffec3a01257362d62c13e58e7b5b7dc2ce83090af7a8d63c88e686e6a69cce8ab8983a88a095ea289b8b9818d80ee25e62af8b305e882be75fa0c","ssdeep":"768:SdH+/jkBeG/WMIrWaCOiy5OAmoBAFUSOLewlI:w+/jkBeG/WMIrWaCOiyEAmKX+","tlshash":"b1530f239e38a12cf03f1245e9d079ad72059927965f01f6fe83d95aa0dd3e31d32a4e","first_seen":"2026-05-11T00:53:27.943185Z","last_seen":"2026-05-11T00:53:27.943185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/assets/index-NDJUuGfo.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /assets/index-NDJUuGfo.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1177\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"38be12b8cea2c2eccac4851a87237131e897c2028c84f5b85631e8321438da70-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1778460768.889677,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4194,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4193)","md5":"bc32e029dba8befd24e4eb2146c6f899","sha1":"c10145a62059990f2abdf04afe161395a2d3cee7","sha256":"32866790fa8ee66cc896751ca759b9a6d0c3488f201d666040b6a8aa4461299b","sha512":"4fbd1967c673784c6377ef6ac80f0e7e3c29dfb96beb3226b92a135bb0e3d3456bbba70628686e93b9a7da2f88b7efd023065a1e52fc5759e557684a4590e0a7","ssdeep":"96:Xs9p2bqGJI2T1T5j5Q+gjpqxsCYXmS39xgY:cHUqQI2T1Q+iqxT838Y","tlshash":"76817122f2941815f5abc8d1b0c1a7bf36389172c0634baca777b5a5c3c91e7179a709","first_seen":"2026-05-11T00:53:27.945316Z","last_seen":"2026-05-11T00:53:27.945316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/Elliptic.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/Elliptic.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 526\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"8dbf79c02e60e85c1b710568e84a2ae4f31fa87c85f696945128c02f48c79306\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778460768.234264,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"418e8ca779ee89f651aaa9add5c78c90","sha1":"e0af31da3df7bd0c0957796905616e771db98715","sha256":"85fc06aee2ce609ce0b14ec5ff91fc24d44246613ebf59017da1435e2e61983f","sha512":"90b49903acdd17f9b0882732ceaef0207c6d6147c8673ad2e9404432ac4ee4837ecad27ff17bd656d76b33afdd6e4e8142195ad3c669ae299c54897aeb0f34bb","ssdeep":"","tlshash":"83f07544b23004ebdaacfa3201ec2e891955c10ebf301921124ee9d21785babf433ed0","first_seen":"2025-08-11T21:39:04.774047Z","last_seen":"2026-08-01T08:37:27.753927Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/hypernative.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/hypernative.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1766\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"34d282cf317b817a1cd25da35a445ad0ce15b1f5a07932a53690d9e2516874da\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.238118,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd032d84e7dd874f19808839ca4b8a7c","sha1":"422e8c55fb35beb88b1da5b147a0f21e61fe6dee","sha256":"945cceaf66a6e82c7cf3bf882d876efa306a4c3d2ea0d7bf01702f46c0531be2","sha512":"3eddf98f194370872df01fcad21a1b337402c158d44ff1e6a950b905112db3336faa4db5370e4473362e62eaaab583f692f3d7f30ce81199d9d97741f416538d","ssdeep":"","tlshash":"43314dd284704388ae184625d37bdd48701c9e57747f8b3167e110444718f67b29f33b","first_seen":"2025-08-11T21:39:04.764994Z","last_seen":"2026-08-01T08:37:27.764263Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_fast_desktop.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:49.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_fast_desktop.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 1378641\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"5d86713bac623c52767cad3a216e6367a517d4fea5958695b855e2d62e00f232\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-1378640/1378641\r\ndate: Mon, 11 May 2026 00:52:50 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460769.143337,VS0,VE1080\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1373160,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"9a5fba883369cf25fcd3de86facd08b1","sha1":"0aa0f6141f01d5a4bf827532aab3e029a30f2ed9","sha256":"c10dcb1ac941eb67789e362664821756ad38f30107d147897daa06deee62c45d","sha512":"5c514cb7b02b4f4aae4939f44af686286fb7e1470e4339c60da0a269857ff3f9fe143e8f6cf4763bd8710ac22ec30d776337a4c718c5b428ae6e39c6efe6002e","ssdeep":"24576:3p/jOrSWT9ihDPOxGvbRNI/86ocsvDBIylxy2+6LL+:3pbOmj5uGvbRPcsvzxy1V","tlshash":"f925332e2abc2c906fa5d17ef1b95c257d7be221687de42a3c1931c791094fac1143ab","first_seen":"2025-08-11T21:39:04.776649Z","last_seen":"2026-08-01T08:37:27.691541Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/e4938badb52137ae.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/e4938badb52137ae.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 70\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"6782c3e8abea5ded6c40dae259edbdbec76495f7edc14ee1f7c013b19a7ddcc6-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.881914,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c75898a1a76861b47065ab7ff9aaa504","sha1":"5e008e41e53f98ce7380a840b58e8ed5f3a7a367","sha256":"d7a7fc88d5cb319c88dfd3f2fd2289a952a165a2a7ec6e7bca7f7e64b06dcc62","sha512":"8d606d96d783c788160f8d0b4d0069b25e64f088c6f27ec6c9254776fc6440d21be9376a7a91b135f31fe76c248ba1e0e59eb0a23637929836ced331634e60ba","ssdeep":"","tlshash":"93a01128c0aea088cc82080a80b8e8208800a0c32fe080a022c0a3aaa8080c2b002230","first_seen":"2025-05-29T10:38:30.638071Z","last_seen":"2026-05-11T00:53:27.950504Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/media/3478b6abef19b3b3-s.p.woff2","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/media/3478b6abef19b3b3-s.p.woff2 HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10088\r\ncache-control: max-age=3600\r\ncontent-type: font/woff2\r\netag: \"156c0598db8356bebaf6ef3774941d3cfb0aa1453ce6493985935d2a42a2de55\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.887770,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":10088,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10088, version 1.0","md5":"eeee8726f3b4ae9d8c710efba031ca6a","sha1":"5d7688a25d7df9561537edb25fbee1ed0d13a8cd","sha256":"64bc2a00d28ef824b977ed1c523138d821eaa4576447153e02de70aacb071147","sha512":"a1552943f936838a0a66b0e82975589778123a49451872a5861cb56f3caaf495b3e371515a59ab61cf08203d989b1de586969300313502014ee0835f081d2f68","ssdeep":"192:hdauXx8tGhtKsJUwYJ2RLUqhjIf47mwW7CMtm7LtR1TazkU/Ur/O6HJ6eVR:hdauX9fUZ2LUsIfNwW7C5lGv/UrWy6eD","tlshash":"df22bff018944f16f4fc0d3d6aa359fb9e81e18cb050bbeca19655d6468eca4601b5c9","first_seen":"2023-06-30T21:36:04Z","last_seen":"2026-08-16T02:47:14.653047Z","times_seen":528,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/assets/images/poweredbtcky.svg","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.19.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 00:12:14 GMT","end":"Tue, 04 Aug 2026 01:12:11 GMT"},"fingerprint":{"sha1":"51:87:5E:C4:73:62:87:3E:CA:6C:BF:CC:B8:64:22:7F:AC:4C:43:8A","sha256":"8A:46:D6:8E:FE:D0:55:67:A4:13:40:28:02:3B:35:A0:2A:BB:53:27:EE:47:88:5D:F4:AB:CE:F3:BB:53:D2:56"}}},"request":{"raw":"GET /assets/images/poweredbtcky.svg HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Mar 2022 04:41:24 GMT\r\netag: \"eb2-5da3a68c50d09\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=36000, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\nage: 506551\r\ncf-cache-status: HIT\r\ncf-ray: 9f9d33f7bd95b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-16T21:00:03.661241Z","times_seen":33177,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":34,"dns":33,"connect":3,"send":0,"wait":7,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/home-hero-desktop-fallback.png","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/home-hero-desktop-fallback.png HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 123866\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"a759f040930d2370f5879108369ba85660d4b6ce913cc7115449a3754f19a038-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.894735,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1334 x 582, 8-bit colormap, non-interlaced","md5":"84e0d896912d70d2f6593f27da315639","sha1":"8aa07d595c8846c31cbe45aa6bac8c4d3fe06764","sha256":"116170cca5de40ec5b6ccdbbe92c2b944087d91930290a664bc692b207d13882","sha512":"8e294061233976f96280e83aef856d47eb84190cbe60e63f55a3fb76f708c147d92bda2105d33732f5bb5726f9084c76683b4d32013d31ca1709bf00947acdb5","ssdeep":"3072:mOJfUSPLWQJrrtMoNEK4oiG8IjPqZNOQaT0cZBcy:mOfUSPLVJrr1JtTqNEB","tlshash":"fec31291f6251498daabb929392a5c65c7134c51099e2acc0f1c542e730cf6fef85fe8","first_seen":"2026-01-04T15:58:17.98359Z","last_seen":"2026-05-11T00:53:27.95208Z","times_seen":8,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/HexTrust.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/HexTrust.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1832\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"27c4f585ed6822ce60c04a48e3545d7b55e9df635fb324d72f238220a63aecd6\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.247402,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3978f7542bed8e61360ecae12e999a7c","sha1":"69e859543324898cd73c6246d558293b93497248","sha256":"6afbe97b7becfb2b0008dfcc0f04267755bb64fcc00c16b7e875287f19c5ca79","sha512":"ab2c7958e052736ddff1931a1b744db235463d89f31bbe957c984954f31b26a506ceec47c5825926d0012da93bdab526b1565b7cd0f4bf5bdb951a2d5aa3ae0b","ssdeep":"","tlshash":"5a31eb01d636ff5d3fffd0a20a1796c7d4da71822e15170420702d2696cd0ac98ee57a","first_seen":"2025-08-11T21:39:04.746858Z","last_seen":"2026-08-01T08:37:27.686123Z","times_seen":38,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_secure_desktop.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:49.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_secure_desktop.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 2070091\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"156150f4bed2ce9d3785b79c755244b1cef48c04f2833df79aaf09c2f4d14757\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-2070090/2070091\r\ndate: Mon, 11 May 2026 00:52:49 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460769.139595,VS0,VE371\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2047145,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"c5bdd61c10f692312222bd7181748cbb","sha1":"5eb4f7ddd79e8719d1097934ee4dc0ebe485e13a","sha256":"a816ebc439e192a548a806c95403f4d63c727dd58eb067d61632ecc1e9180078","sha512":"3a68f94e1377b3cad1ce0804f08add5df31c3f78f6506eda73e29f4f147dd13e862ee94e7d75feacb924fa270f864766dd3d8843819c5af851542f6d963fe91b","ssdeep":"24576:fv/gRI0f8jj/M0k1Jsl2VQhfXl4m8eElhkL5cV2VnltmVH+yxvV9o:X4qtjj/CJ4yQhPmeElOqUltmkOV9o","tlshash":"742533a393f58423c8eb2a290ddf20938406f0e1535ee03b61cab15e96c935179e677f","first_seen":"2025-10-21T19:21:03.521714Z","last_seen":"2026-08-01T08:37:27.757956Z","times_seen":18,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/af82723cd7098a7b.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/af82723cd7098a7b.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8559\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"a5d9ebd303d805045df1c14fd1b504c600b81e085ce721e038abf1ba0e12890b-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.883954,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":65294,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65294), with no line terminators","md5":"c8d4e96d55859847320860c539ff985a","sha1":"40f795ddab6c43413ddc4f22df05dd383e8eeaa9","sha256":"98e537a0201a0199410cbda522df24662bf80da0705c09de1b395628deee6df0","sha512":"fda12c1489240932f0d398049a34a395be08ed591c7146e0990ea1d95f2537580bde4741975084c03e113fc6b3571ca2d614d7c18ae387044526db1887699f0c","ssdeep":"384:xn8aXB+EBGyw+l++rsBN3Y05T7fV0HHi9D3B/n+lnWMJn964qwvsZDeKC6UK35zN:xn8aXNrcmHS/+FvJAxRzR+rprYm7Pr69","tlshash":"7d5353279a26606cf07f041af1c07aa963149463a64f05f2ee03dd59d5de2d32a72fce","first_seen":"2026-05-11T00:53:27.955495Z","last_seen":"2026-05-11T00:53:27.955495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/home-hero-mobile-fallback.png","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/home-hero-mobile-fallback.png HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 118\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"5d1bd1751b448d39bdbbd6fa1e38550b8b4b67be85899095590cc2224352781f\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.900293,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 1-bit colormap, non-interlaced","md5":"e8972ebc50ceca51575bbe815b4009df","sha1":"822f7ad1308dc81e203638a7d416192a52573e49","sha256":"c1cd47dc0c0ac5600d020756c791f9f0e15d941a115ccc66f0b32d50a4334794","sha512":"72291d4b1c8aa333b397233ed65d9b1915d3142e48d65fcc9ef677d114757560eb2c8e3d22e6c3ec4dc290c6f17a2cb664cf4bf9ce4f88fbe6a1499f214ee0e2","ssdeep":"","tlshash":"aec012c32611acb1fa070037892b7d31cbe310153015022b4942c46d7c508848a54343","first_seen":"2026-05-06T11:10:02.102657Z","last_seen":"2026-05-11T00:53:27.957163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_hero_mobile.webm","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_hero_mobile.webm HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 811085\r\ncache-control: max-age=3600\r\ncontent-type: video/webm\r\netag: \"406825f599c8e6f7c6f8b339a1ac6bfd52cbf26d9cde03db758ac560f1f04a13\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-811084/811085\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.231914,VS0,VE375\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":811085,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"2b47847000402be86bc6e8e0164872f0","sha1":"a7d2fe98fd821aa71e81e832b999d9a3ab92b700","sha256":"8f12f817cd5575e30ce24e494bc860b07f4c85e34961189997ffda01c90715b2","sha512":"15dd128377719122afc06ee94d10c96313c9cfae4e8639474ee863f99d5141e75f58bbdc5d93d3c08967ef73fc7f136ca295fb8ee272269e9a19526d0a845f0a","ssdeep":"12288:+Mvnt800wccMToi19IsusPe0Ry0ElKUtbU7jxs4coY2cWmowa0u2:v/t8009VToiTjuPtt0WbU7SEqWJp2","tlshash":"9005029acb06d7ebc6092635e6675305f33c011b166636c6b47883b2d8787eca827377","first_seen":"2025-10-21T19:21:03.41002Z","last_seen":"2026-05-16T18:03:41.193969Z","times_seen":12,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/Google_Cloud.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/Google_Cloud.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3710\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"b21c1ed82f16fd3b1944e6fa9f2d2a57cc7dd5e6bfdcde40a2c5f7d0b1743d44\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.239858,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"478a85125d27a46079062788f0f497b3","sha1":"6fc324a9b68172336fc50045b7f45a86657c66d1","sha256":"bc61e17a7cc6eefc1df17e55adf4b0bde15cb5033042d70bb06631de6785acc8","sha512":"b2756aa4e8d545f9dc02f0c7ab80643c871e2bcc0517e39c182d2bd8433d85624c83c446848bc3aa505d6e63ecdfdac784cb5b877bf008a535208a78156e7d2d","ssdeep":"","tlshash":"ab716c500fb9f4b26b224c9c84793b87b521ae4c96574d25716ffc1e17806f444e46cf","first_seen":"2025-08-11T21:39:04.745483Z","last_seen":"2026-06-08T14:59:01.966171Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/en/static/video/home_secure_desktop.mov","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /en/static/video/home_secure_desktop.mov HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 446434\r\ncache-control: max-age=3600\r\ncontent-type: text/html; charset=utf-8\r\netag: \"136d5cbf647be021be5eddb0d9f85d85706f51b999895e49d12db15dacf8d293\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-446433/446434\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778460768.252624,VS0,VE267\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (585), with CRLF line terminators","md5":"ee7bbbd3be2d5a5eae46f134477756da","sha1":"539b9ca2f574c6b1102223e0fc4a3ad4cb30bb03","sha256":"489478cb3df67961b4d122544f114d95ab89d83f8e9d454e9ee0fdf419f8ad94","sha512":"d815ae70f018b11b2d1a0506a3d273782d947058622a0ab95c45bbac890760fed8df94d41f0518d10564d97dfd8c3b9070143c4a49a480180ed7e8927eb388eb","ssdeep":"3072:AWCNtWMVWi1pVcmaPfD0FGQRLw9ZLDDCdBDMAcYXsq7t5xJq54jMy6yDDaqTF:AWCNXl10PY6ViOKB","tlshash":"9f940b70f180e19ad4239bddd67f9c3afa4501fb814289587afcc7768bb147c1a53a88","first_seen":"2026-05-11T00:53:27.909336Z","last_seen":"2026-05-11T00:53:27.909336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/_next/static/css/629db0f9871b74fb.css","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:47.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /_next/static/css/629db0f9871b74fb.css HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4280\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"6b88ba1c5f131b44d65c66e768221c7769b5c6d21837226ec6ecc001cf157ad3-br\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:47 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1778460768.885591,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":31721,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (31721), with no line terminators","md5":"8c9402270be761051f824c8f0afdf09f","sha1":"8c7de06b04a42b0826207f04702d2b6ca8ba7a5a","sha256":"5ac4827016425a11fadc92d04bf8ec6d1ac05bfc65d3557a59f6b003a7af1dfe","sha512":"b71c9a1a22efd1646103c4d2c79c8ec1f5ad5a23b8fb2819a6cf8c6f131e8e1bbdda49ab2b3e1f9fcf0a796cee0fa7d38366e41e5bd36e4e593b004b0c23b93c","ssdeep":"384:8vogqazGAtK7JVr8nfkSdBo3yOpNoyWTOUX1qLGvVUVmmeH1UoI8gRMMErRjoady:Dayq1IKeRDElsgxkY+","tlshash":"dee23067da74657cf07f4552a0d07aad36048427955a02f2fe02ed0de9dd3e32a32b8b","first_seen":"2026-05-11T00:53:27.960799Z","last_seen":"2026-05-11T00:53:27.960799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare-9ed7e60ab7a5069ce-voting.web.app/api/media/file/LayerZero_Logo_Full%201.webp","fqdn":"flare-9ed7e60ab7a5069ce-voting.web.app","domain":"flare-9ed7e60ab7a5069ce-voting.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://flare-9ed7e60ab7a5069ce-voting.web.app/","date":"2026-05-11T00:52:48.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /api/media/file/LayerZero_Logo_Full%201.webp HTTP/1.1\r\nHost: flare-9ed7e60ab7a5069ce-voting.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flare-9ed7e60ab7a5069ce-voting.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1208\r\ncache-control: max-age=3600\r\ncontent-type: image/webp\r\netag: \"50c9b2ee8d25a58b8cb89389659e273da603f643e408e3dd92a8a00335d26c4b\"\r\nlast-modified: Sat, 09 May 2026 23:10:06 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 00:52:48 GMT\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1778460768.235381,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57a6e0ccc397ea7b740a6e0405bba3b5","sha1":"3cbac7d5fa1419b3c61f66c311b3eee7b9eff85f","sha256":"597dc3cf8b228f8160c527c2c765da1068240ef592a34772275180ea887d6d3b","sha512":"61719d11d2ddf9c20278344f009366debeeba583705f33c9fb1b95c9b627ee62c33a662c261180173bfdae490d645c623029c801b9f96db288612a43d9326ae3","ssdeep":"","tlshash":"5021b45503021db0c8dcffe059c2685fa17be5f91300ac195740b0a82ad41bee4ff82e","first_seen":"2025-08-11T21:39:04.775323Z","last_seen":"2026-07-22T17:59:56.52534Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"flare-9ed7e60ab7a5069ce-voting.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}