{"report_id":"6f4170b0-aca1-45cc-9ea6-c6ee1e3b3e9f","version":0,"status":"done","tags":[],"date":"2026-07-26T14:37:19Z","url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"172.67.151.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5d604588ca2aa0eff52edf060b9949ef","sha1":"51744e0725c07e7a531c8a8e4c1f16f4b3e4d73c","sha256":"891c8e8225dc5eeca28e3df209095203346bbbfa939f94202fed042ee140ca10","sha512":"1e45548bf96d5061055f1c6538787c7077d11515e61cab12c31464708dd1d524cc0ee2cb39ec16ba36870a63ec989842c530bbd381804838c007e8870493a246","ssdeep":"96:DJFs1Bx13gb61j1l0d7gx10UFZV4jl22D+i8kDNLeOl:H61rp5mULV4jM2D+z0sI","tlshash":"3b9161a544f5663b18a386a9e9d07f4baf817607ce8d29417baf40e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"172.67.151.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T14:37:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-07-24T11:49:58.010208Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":642,"comment":"","tags":null,"fingerprints":null},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-07-24T11:49:58.096449Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":646,"comment":"","tags":null,"fingerprints":null},{"fqdn":"votes-fwa.fun","ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-26","domain_rank":0,"first_seen":"2026-07-26T14:22:48.129362Z","last_seen":"2026-07-26T14:22:48.129362Z","alert_count":0,"request_count":9,"received_data":1294676,"sent_data":4391,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":3,"received_data":605536,"sent_data":1430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-07-23T13:25:17.67264Z","alert_count":0,"request_count":1,"received_data":1163,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-07-24T11:50:00.709064Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1250,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-07-24T11:49:58.881436Z","alert_count":0,"request_count":1,"received_data":674,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-07-24T11:49:57.873316Z","alert_count":6,"request_count":3,"received_data":4403097,"sent_data":1416,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-07-23T03:12:00.270182Z","alert_count":1,"request_count":1,"received_data":2875027,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-07-26T02:35:00.635862Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"votes-fwa.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T11:39:56.380236Z","times_seen":408116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4caf32a76b8acc1782161695533a3218","sha1":"734abf7f6ee9f38abbc781dbe129aab86a237227","sha256":"e3c8b4147474421f1b158185d5affdeffdd9d26c48e0cdb4f97602d27025dada","sha512":"94b2538b4c77a65ce184acd5dc7dde675377edd140d5e89628fc113f8687c52bd0d5d52cf90e4c25a08dd0cda83b7afc725b749906a4fc47357996c7d9ea5195","ssdeep":"1536:V5hjW7cPoHBO2fYlBZnuv8RXUz5PD9GUOFmoOIfYVTgAZLHX+231O/nAMgDK1Onn:beDYPuEFUtcvyYSynSq05N","tlshash":"81d445932b91982ec2ee9741cc348c5f9cf495318fbbd049ee279c45f68c6a456e8f09","size":627573,"data":"","first_seen":"2026-07-09T22:10:06.988212Z","last_seen":"2026-07-27T02:54:49.024233Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"340d91dcf13b076921b75300ec47f83a","sha1":"c890f2491c91c557a44ba929c67e08b5944d53ba","sha256":"4463ac697265105c186e84801bbd5bad264f59470d34ff3ec348367d6f2e6f67","sha512":"bf78f6567574d468f2e4255befb3eda23d84676cae1c3da368fbd8763c723eac5e8bbb01f772db90a140a95ae88fde992ebf4105575fe08502e64aedc780658a","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGPQXp91gGT8b:QQqJr/0SVwZmzHCP2aIW","tlshash":"ff55b0e70ac1c92da4afd921ce3c0c7c40f656622d79218be553e9dae6cc3754f8ab44","size":1320082,"data":"","first_seen":"2026-06-02T08:49:54.163198Z","last_seen":"2026-07-27T02:54:49.044909Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-07-27T02:54:49.045912Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3731bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f79dcfc1781a80fd7938c049071b68ad","sha1":"304e8abd667e174b3e915068f69d1e3676a286f6","sha256":"f7e8cb2e47e354b88e8c7b7085e0602d7b19a89bc5e280214d057dd668a1b48b","sha512":"517744ac700284eaef7680a9da77fd52a6b66c953ed03344f81d11c51266732ef0a16515a01f9ade5e06ae4dad287ab5833ba601f6a517ea58f1ffe60d14efac","ssdeep":"12288:krlE8m3Ths10tkwUaTDWw5WS1Goo0eGZOeHE+eCcbLfc1D3dKbpbeeaK2Au:khpm31uF3EYfoK+eCcb7c1jdKbxvEAu","tlshash":"f6b5109713c5582ec0d7a66fcc71bc5df0f59a324e791986ad13908bea6e78046f83c8","size":2452572,"data":"","first_seen":"2026-07-24T11:50:11.02626Z","last_seen":"2026-07-27T02:54:49.043871Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/bpY5h09KFT.js","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-27T02:54:49.01635Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-27T02:54:49.023648Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2a4d2e2927eab5dfd9a1752ddf039305","sha1":"49c69403cdad4e6ee711381fc9ce130c1dc7d48d","sha256":"7b49653dc9461d5bfebc2d82ae0b11c653e278a2b39e1d7530a0f4e056a77d54","sha512":"ce9a51ce418d14fc0daf02f09d20ae5753a4fc3aa969a637003a2bb21f0af50c276b2ee6ed08de73e4a00d34e00939a99203ceefb3a0b5ec67eb6a79248a9643","ssdeep":"1536:WrdhJtW7cPoJVoD2zgCK1o2FJUx73DvGTFmoOIU0gj1BVr7sD6pnFXFQi31O/nAz:WXm1cCso2nU5+Ty7MyKRMsm5r","tlshash":"9ac415a66ba59c6ac6ea030a8c385d4f9cf45832877fd04dee6b2d14f5bc19057e0f09","size":588809,"data":"","first_seen":"2026-07-09T22:10:07.114055Z","last_seen":"2026-07-27T02:54:49.02547Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0dd6e93e4f1e94b26bed05ae03ae347","sha1":"fa2daa52f91c134780f67f90771d16f3cff963d9","sha256":"33774f8a5df2f0cebb375107a18ed357958879bbfe35c807e27f4492a6b0720f","sha512":"73e962b640127e9d54be2087e3ce6fe15496c82f8f253874102eaf1cd7d0aa3cb31ac3d84c3a089c7971da34883dab5c62d62913ba76888b623da0ce014dae1e","ssdeep":"768:BzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:BzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"5b533ac0669c609153eb29c0487f344b707b353a1b099998f265f9efacac5d6803dd7a","size":63432,"data":"","first_seen":"2026-06-17T21:15:25.480968Z","last_seen":"2026-07-27T02:54:49.019573Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52b67e899609ef76feb9b304908f6e86","sha1":"3a91454ec2db719727e8eb84597a695a37c0e6de","sha256":"d92d53155cd441321ddc818c6c335ded0da3af6a3894e9c7ea46ad6cdf232308","sha512":"cd41c7228a4c353c74a52afc0b0cb7161432ae4f8fd6aaf1f61de350fe630b94f76cc16757607950b2a07c4c03a865ea5b1f6970daa4ab9d0ef2b29635f312ae","ssdeep":"6144:VRMvk59jx48/taojdhOV3E9B3snP9BqWdw7wFBSzWb3ckXQF/91uqjk2:V2M/l48wIrjByzGy83","tlshash":"1c35a1e78799dd3f885e85298e3c6d9c40b62c73096da19ef453b258c4fc2524bc7b88","size":1150545,"data":"","first_seen":"2026-06-02T08:49:54.164781Z","last_seen":"2026-07-27T02:54:49.046835Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.1","filename":"https://fonts-css2-sans.b-cdn.net/index-3731bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2206569},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj51 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.034141278408337916] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj52 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.785076612733e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj53 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj115 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj116 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj117 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj118 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj119 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj120 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj121 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj122 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj123 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj124 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj125 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj187 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj188 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj189 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj190 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj191 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj192 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj193 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj194 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj195 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj196 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj197 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj259 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj260 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj261 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj262 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj263 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj264 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj265 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj266 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj267 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj268 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj269 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"error","text":"Error injecting modal UI:error loading dynamically imported module: https://data-image-svg--base64.b-cdn.net/assets/send-bb23cecc.js","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js","line_number":374,"column_number":83261},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:NetworkError when attempting to fetch resource.","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-0b64b1a4.js","line_number":3,"column_number":556},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:NetworkError when attempting to fetch resource.","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-0b64b1a4.js","line_number":3,"column_number":556},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj273 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.034141278408337916] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj274 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.785076612733e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj275 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj337 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj338 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj339 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj340 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj341 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj342 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj343 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj344 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj345 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj346 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj347 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982}]},"http":[{"url":{"schema":"https","addr":"votes-fwa.fun/BDOGrotesk-VF.ttf","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.764Z","timestamp":1785076610764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /BDOGrotesk-VF.ttf HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\npriority: u=3,i=?0\r\netag: \"69fcc640-401dc\"\r\naccept-ranges: bytes\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NnherB5JLS%2B7Fi3T60QbynauvKkXIcJRS%2BditEVf%2F%2F2IEvWvFbzO%2FCvJ0ZJJwnajXHuysvEmOjukdUWxtWDiAgUt2bXb9KbIkyJfPZ23ycD64ohLoswXSDi3XId3a7w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a21423914bbd569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262620,"size_decoded":263336,"mime_type":"application/octet-stream","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 31 names, Macintosh, type 257 string, WeightLightRegularMediumDemiBoldBoldExtraBoldBlack","md5":"d6c6799422959061ce061c6e80b854a1","sha1":"875d6fac26ffccc43c39ba1818bbe5831ed11adb","sha256":"e80094d0c8cf90cbdc28f8b6d32872bc45adfb110bfd3610783967f02e5714b8","sha512":"aa91c745e7c830387807f3534572f8a0b060b6fb523d0e0903c3827f3c674da7d6a41680791af35aceacf49b84750ba5d302f6f41644199d42e3e984cfb5cf68","ssdeep":"3072:+MpF0nvpRylqv28QTzTFlq3ER5yXPIcES00oy7w/07u+bl7bVulK8dicb2Ui2iEf:+Mn0hRylqeQ3E2PI2/Dl8d3blz6oP","tlshash":"6a446b02f5db93a7cc45063983e31ba7673585686f619b07694c7c3eec9b7e06e52e00","first_seen":"2025-10-20T22:24:04.138992Z","last_seen":"2026-07-26T14:37:55.042429Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-5q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:51.538Z","timestamp":1785076611538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-5q3nqqoukwf.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 14:36:51 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501294-99375\"\r\nlast-modified: Thu, 09 Jul 2026 21:28:52 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: de02fa591f123f7674908fc775372bce\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":627573,"size_decoded":109289,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4caf32a76b8acc1782161695533a3218","sha1":"734abf7f6ee9f38abbc781dbe129aab86a237227","sha256":"e3c8b4147474421f1b158185d5affdeffdd9d26c48e0cdb4f97602d27025dada","sha512":"94b2538b4c77a65ce184acd5dc7dde675377edd140d5e89628fc113f8687c52bd0d5d52cf90e4c25a08dd0cda83b7afc725b749906a4fc47357996c7d9ea5195","ssdeep":"1536:V5hjW7cPoHBO2fYlBZnuv8RXUz5PD9GUOFmoOIfYVTgAZLHX+231O/nAMgDK1Onn:beDYPuEFUtcvyYSynSq05N","tlshash":"81d445932b91982ec2ee9741cc348c5f9cf495318fbbd049ee279c45f68c6a456e8f09","first_seen":"2026-07-09T22:10:06.988212Z","last_seen":"2026-07-27T02:54:49.024233Z","times_seen":65,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":11,"connect":1,"send":0,"wait":2,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T14:36:50.049Z","timestamp":1785076610049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Sat, 25 Jul 2026 07:50:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DByuH3ashAkvoiGUP%2FwSIREJoHk9fRThbinPHrJ9SOjerzpRzjEbEyK4HGc%2F5TuZyfFFHdN1oUdLMwJuvH3Nzg8nLW0R8mncXFu2S6wF%2Blv%2FtJ1foGOBcVJGTs7dcAlR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a214238d1b95569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23491,"size_decoded":10780,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"05e1a6bd81096f42d24408abd63ede3c","sha1":"2b6683b0a715c9f0c35c30b1b60a8a465c08fddb","sha256":"b89942a0bd7151780c7ccbb6be5f9a7fbd2cf1d47f33602cc756b9e5841451d5","sha512":"7ebb1768a5d78f2812d40c5ac21e0357f724c26705c2c47f3d5120ad91b40331de9e1fe68c5cac6567a229202c5c8f96b8b2ac3c457f8c69f30ef165867af9c9","ssdeep":"384:CRij0hD8YE600MUwwOqda3MV8+RlmFzzwHREnukVu:vjGDg604wwBfmGHREul","tlshash":"efb2088e25f301593813d8992ffb6b1a72a4e413c109c9187eec67888fdb9d19c6339c","first_seen":"2026-07-26T14:37:26.740512Z","last_seen":"2026-07-26T14:37:26.740512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":27,"connect":18,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/favicon.svg","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.829Z","timestamp":1785076610829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69fcc640-45fb\"\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLo%2BsOGFksRyPlNddFYGMjwVKC29jl7wsNKIbn%2FcOEg78Ksr9%2B%2BkvZ9yhoo5yBIQ6wSknL8Lj5eE%2F6FLEkRxbqJ3%2BnuStYm6eE5R9sNYIQeWAHP0Kud%2FVBSWQsd%2BX5qL\"}]}\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2142391abc8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17915,"size_decoded":14183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78f36f2a5baf8c92762b4442ae4879dd","sha1":"35017a2033d243e75355ffeb38e2c3d58f3e557e","sha256":"ecd75c373d8fdc2448c487bd5a6c00d2ffe42158774d026911f3a20d1f502615","sha512":"91d00a6bd4e7f0ffe5ffcaa722018143aafb715206853b955bc8ec256bf2fccbb6fac5d27b914089be0931f7af41d30231a0a928588f4971c5aa6e6dce7d22b2","ssdeep":"384:lKPjliPCU+YDkYWOT2RpTBMZHrZ+LEXolQmL43aGjG8QLF/:Eb0TdW8eaHrZ+gXolQpqqG88F/","tlshash":"a582d07615a214de734554fdd47102bbbe29ce1ecaec5c884c40b0486b7dae0fe6936b","first_seen":"2025-10-20T22:24:04.133302Z","last_seen":"2026-07-26T14:37:55.041313Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3731bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:52.342Z","timestamp":1785076612342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-3731bmtv859.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://votes-fwa.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 14:36:52 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a602142-256c5c\"\r\nlast-modified: Wed, 22 Jul 2026 01:47:46 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3ccb8c1ee610356983d5108eb524f16d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2452572,"size_decoded":457295,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"74cec5566d414cead09280cba38ad752","sha1":"fb8f0b0fd1dc4318c57d91487534cb03b73f5825","sha256":"133dae78753afedb7e27f50d8831a718aaa7ab975ec1af4cd31c4d8cee8a779d","sha512":"65b6ad916cd88550da24fe60756a26bea459097a4c154e83536b2b2ee65a72b7247e178cb288c9b2eba2e12801584f4ae8c8d261581e70dc02bbbaaa69dbe4e6","ssdeep":"1536:e8u8xGlLA18uoEw6gHc1HSsmzgOgv7E7J50vPTr7p:hurlLQ8dEscdliGXTrl","tlshash":"08250cfb07a44d3ec0bbe945dc71ac5c50f99ba14e6e5545ad23e88bd74c7a80a8c38c","first_seen":"2026-07-24T11:50:10.987155Z","last_seen":"2026-07-27T02:54:49.018879Z","times_seen":40,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/wordmark.svg","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.448Z","timestamp":1785076610448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /wordmark.svg HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69fcc640-190d\"\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8pvd2LNn7qcsv%2FYl5S34wvYXINjh54RJE9MZHuk0d%2F4kitqLMKH0jdiLylxDD4neThfwuugNz7tfKri71QuakLYyf8uR6b5gTBPPp2Jm308lqIsqP%2BfexHwtIh4aMQv\"}]}\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a214238f5ba8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6413,"size_decoded":3296,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78c8e36c38f684f829da19d9710c521a","sha1":"7641dfd471b1be81c37998e08e616b15c85e915b","sha256":"791c67cecbfd11a360b0364a0265f1fead56dfa49d640196bb58a33b3e4cadf4","sha512":"136ce81c2645808fca755abba76577810862534eec3814f88ca537e4d3af99f77fb6cb7df393e69fb16c454a6229ef1284bd751d780fc070e5aca584e015b6da","ssdeep":"96:vkt8JjaJRKQNbkzlnnmLF47UwpoHvzPRgz99W2Of74CPHRaxk53pBXbKqsZcju:vm8JjwRKQGzliPLPRNcZkNrLKnZcC","tlshash":"e4d13eedaf245fe19cc196c6ff5255d9750f80a689c10f70d28edf4e38da82dc944982","first_seen":"2025-10-20T22:24:04.146149Z","last_seen":"2026-07-26T14:37:55.041856Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/favicon-96x96.png","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.827Z","timestamp":1785076610827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69fcc640-1237\"\r\ncontent-encoding: gzip\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj1qbwAUFoazKhnx4JFedekDcZF9B03DE2omU9sDd4qyzfDQhZBJbSF8v5LKQB%2BcZsuYC37zii4VP9Ga6TDGGDbxwgfEcvIas%2BiFwbA2%2FFpbbaGhAMGscmFmTdT0SQ%2B0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2142391abc7569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4663,"size_decoded":5392,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"790da2d1d110445509b73705f1b9443d","sha1":"7e7659ae44591ab4fc30d71d51a34a203d33f6db","sha256":"e739f2e920ae65607c0d6636a0bf5bdc9dfe53249cff326ae6ca622122ad96f9","sha512":"2a436c5e333402a9c507ae40e00bf63bb6cfcb5e430a884b3996774969c0eac7a0e407b71090927a9b9924dd88260d4179a51c1d774ee5e642699d6dc50d5907","ssdeep":"96:gzltLkkf6O77UWzGcP+95/hbDCshAreWvG3Evte9YgZvXz:2PLbnzGOIXDRABxe9rZL","tlshash":"aba17dc7c01e50195fac1f1946346a9bf782a44c5e17980ac7dcf9671b2334358eac97","first_seen":"2026-05-29T14:22:38.198218Z","last_seen":"2026-07-26T14:37:55.044126Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:52.336Z","timestamp":1785076612336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 14:36:52 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0042-142492\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:22 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bd7432616acd2ebb179968f138c4168f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1320082,"size_decoded":282438,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a06dcf0ae36eb0d74fafb9d09c6033d","sha1":"1960604fc7fc992a758d80ee2873c12fb0ff3848","sha256":"80242312c3b0d9ea60b6832c3fbc11b201dd03ffeecd83166eb6eb92f77530d9","sha512":"c5bc4dbeaae92111099a1d44e55f9e596c5f10e451cadb0cec44d9e2f2613990e1b79c01e55d013862f847eac6b65ff16e400de43867a066004b4694e981cd76","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGD:QQqJr/0SVwZmzHCD","tlshash":"22255deb0bd1892db4afd951de3c4c7c40f686622d69218be613e9cbd68c3744f49b48","first_seen":"2026-06-02T08:49:54.145531Z","last_seen":"2026-07-27T02:54:49.017604Z","times_seen":162,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:52.388Z","timestamp":1785076612388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 26 Jul 2026 14:36:52 GMT\r\nage: 7905\r\nx-served-by: cache-fra-etou8220033-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":7400,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-07-27T07:51:50.603653Z","times_seen":4879,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:53.799Z","timestamp":1785076613799,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 8340\r\nOrigin: https://votes-fwa.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8340,"data":"e=%5B%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A7%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%22e9ba77e4-12a0-4ef9-8f48-4bcc909e7fdd%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fvotes-fwa.fun%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%222571e92c-8452-4cd2-bc61-e92f251c22d3%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A7%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A8%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%22e9ba77e4-12a0-4ef9-8f48-4bcc909e7fdd%22%2C%22errorMessage%22%3A%22%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fvotes-fwa.fun%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%226f8bce46-3dea-4760-bf1f-d0234f7aaade%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A8%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A9%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A175%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%227c518e7a-a2ab-47e8-b691-01398102c69f%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A9%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A10%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A552%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22fca6f7a4-73e4-4b72-8d4e-2bfc202694ad%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A10%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A11%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0.4689%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%2230747834-7d2e-4bc4-b8be-98e05710642d%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A11%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%220b53fb38-cfcd-4fcb-8ebd-0f6f1e22eb90%22%2C%22user_id%22%3Anull%2C%22event_id%22%3A12%2C%22session_id%22%3A1785076613737%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%228e3a9725-2fd7-42ce-9c64-bea652583f24%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fvotes-fwa.fun%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785076613567%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%223030e1a5-6b27-422a-ad7d-22a6995f0932%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22577fb40a-e478-46b5-82e1-6f42d0187b4d%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A12%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785076613796\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=2fb4d6deb6f245c9108b50bc79b630b8"}},"response":{"raw":"HTTP/2 400 \r\ndate: Sun, 26 Jul 2026 14:36:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 41\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 996909557327038892\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qYi4F6U3Wy2MNKWDlwAvVTHN9OIq8C5p5CGdoNr7NgwZVAJpojHB%2Fjdyss184zlefsaaylX18WnDcMXO3LH46%2BooWZun42Eyryl1ZQo%2BB4fNgHZNz%2BR83lPWhYwnqP5uv7MCVXPOQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=721cd4cc-62dd-4899-b8cb-4b49334c8631; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 14:36:53 GMT; HttpOnly; Secure\n__cf_bm=sXveBBqOtCixXTMosamKq73trI1IFfEmqEZMvIqt._U-1785076613.817238-1.0.1.1-KdRNnvW48XcQWoeijHdNLS6x148Cj.0lypZb_UVAcl27Ix3gUWjKorLpjleLjWyghs1GgjVeGZ5_hmkblsBD6Ll94T88Ke0urJS0HTtRCl1SLc9G1bEbkExow68WEDJu; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 15:06:53 GMT\r\ncf-ray: a21423a45cde56a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/bpY5h09KFT.js","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.431Z","timestamp":1785076610431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /bpY5h09KFT.js HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 17:01:14 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4e825a-c486e\"\r\ncontent-encoding: gzip\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61qkVqVEPC8I0QVS4JgcG4YzUeyZLmnAlh%2BQMrvfwmX%2BRNh4h0UeaDg93iQV5pLwycbO0oxn3AZMUt%2FtIyEtdwmwwfLOboPZNYL%2B%2BdN%2BYnKZBeK65EujTVCwMsMlAu3E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a214238f3ba4569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804974,"size_decoded":209638,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-27T02:54:49.01635Z","times_seen":118,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/FragmentMono-Regular.ttf","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.765Z","timestamp":1785076610765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /FragmentMono-Regular.ttf HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\npriority: u=3,i=?0\r\netag: \"69fcc640-27994\"\r\naccept-ranges: bytes\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDvaPU%2FFh79Qx%2BXuZXttTknSSEvzmIRoZ%2BjvrVkbJAd3ZQjzKP3zBLifRf3HtsZM7xoMI5m778hFsag5qbCJIHGkzOJqMat%2BUVqMq2Dgluc%2BbYWSKjyyEkudVm5QvzND\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a21423914bbe569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162196,"size_decoded":162912,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2024 The Fragment-Mono Project Authors (https://github.com/weiweihuanghuang/fragment-m","md5":"d044d650745b9df5ab39e60a6f436065","sha1":"5db9f1745cbc2c67802a81445bf32524974ead2a","sha256":"e8beb5248b1d38bc24962c6d04bc49204248af5f6e1b3492fda17179a70f1d2d","sha512":"a4d44330c9ad502dc7c6cb80c7aa0e6e2da022fcec7b9c86b7d247d1a36a09100bfac3cce31ac02c735f66533dd1d854338ae37d9154121945f55402c9e9dc09","ssdeep":"1536:QJzsorcxfLOFxrdsiok1yl+mdUFjpnlGJ+g5IzckATetwEwWR+3Ijz+k4RozhdOU:7rxjelpk4g5IWTeqpWVXD4RosqHjhpY6","tlshash":"74f33a07bb86d346ee361f7921ba974763d5f0366b26838b501d6f29ac8b0c01d192cf","first_seen":"2025-10-20T22:24:04.137543Z","last_seen":"2026-07-26T14:37:55.038156Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.939Z","timestamp":1785076610939,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://votes-fwa.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hCHzwom8RYFQQgws6bPMfw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 14:36:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: xbyzdlJFjFdso92GQk1kGmRUQOc=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":101,"connect":121,"send":0,"wait":25,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.759Z","timestamp":1785076610759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2158849\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\nx-served-by: cache-fra-etou8220157-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 158543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522095,"size_decoded":159340,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-27T02:54:49.023648Z","times_seen":452,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":13,"receive":19,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:51.134Z","timestamp":1785076611134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://votes-fwa.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HYG+CMNcTyf6sCvElZnmaA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 14:36:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: PEzqkGqcLDxlOIWWwsvIAscTYdM=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":23,"send":0,"wait":23,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:51.763Z","timestamp":1785076611763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-+i2qUvkcE0eA9n+Qdx0W88/5Y9k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 26 Jul 2026 14:36:51 GMT\r\nage: 2167915\r\nx-served-by: cache-fra-etou8220109-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":24079,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"b0dd6e93e4f1e94b26bed05ae03ae347","sha1":"fa2daa52f91c134780f67f90771d16f3cff963d9","sha256":"33774f8a5df2f0cebb375107a18ed357958879bbfe35c807e27f4492a6b0720f","sha512":"73e962b640127e9d54be2087e3ce6fe15496c82f8f253874102eaf1cd7d0aa3cb31ac3d84c3a089c7971da34883dab5c62d62913ba76888b623da0ce014dae1e","ssdeep":"768:BzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:BzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"5b533ac0669c609153eb29c0487f344b707b353a1b099998f265f9efacac5d6803dd7a","first_seen":"2026-06-17T21:15:25.480968Z","last_seen":"2026-07-27T02:54:49.019573Z","times_seen":50,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.440Z","timestamp":1785076610440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 28 Jul 2026 14:36:50 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YXLazsxhYFJg9Xn7dVA%2FUDlAroSQ6ebWDfTfg%2FGE%2BDhAeQBeAlO%2FVK0uQOjxDcl%2Bd5VACSK78CDLUZxA5ZNKkm0g7I3kQXAmGZQXIWjPc6c8SgDbBH3q29O5S3GsCAY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\nserver: cloudflare\r\ncf-ray: a214238f4ba6569f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T11:39:56.380236Z","times_seen":408116,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.921Z","timestamp":1785076610921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://votes-fwa.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pG7BZavOaDdNi8+gPx/i3A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 26 Jul 2026 14:36:51 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: 3QSJBA0Eyx0aTR01xOaxHA5FhHI=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWB1gjXwjJNXkF; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 26 Jul 2026 15:36:51 GMT\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a21423926a79b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":674,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":0,"dns":20,"connect":16,"send":0,"wait":871,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:52.339Z","timestamp":1785076612339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-511fa38d.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://votes-fwa.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 14:36:52 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50191d-2bdad6\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 85a3e5a0f2f8eb3c5fc22e1fa93429b1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2874070,"size_decoded":778149,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"7cb6682c48951fe0373f6a0c5ad6a3fb","sha1":"3382e15d0b270023791e1c0720839dcc52a80c2f","sha256":"23bd7e6eeb4056941222c6565f5a380aa04d94e89edbc382a93e08148abbd391","sha512":"aeb64a8dab1d03c5864912962fbdfae30c0926e9a3c15b0ac7cd39bd13471b3673268543cfc6cd61e429b4116826e87b22010ba3fb385b8b3d64e52dc6ea46bc","ssdeep":"24576:zFehIJfspBatzrVTfFeSeiZiK/OlUxpfs87u3yQPxF7:zFehIJfspItXVTFeSeiZiELxpff7CyQf","tlshash":"b4256c9472a5b07507e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-07-09T22:10:07.04667Z","last_seen":"2026-07-27T02:54:49.024817Z","times_seen":48,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":29,"connect":1,"send":0,"wait":2,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:53.797Z","timestamp":1785076613797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1948\r\nOrigin: https://votes-fwa.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1948,"data":"[{\"eventId\":\"11179dac-8e91-4c1d-8084-47c777fa06d7\",\"url\":\"https://votes-fwa.fun/\",\"domain\":\"votes-fwa.fun\",\"timestamp\":1785076613225,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"networks\":[1,56,100,137,43114,10,42161,42220,25,1088,122,8217,4689,30,40,2222,1030,324,2020,1101,1116,1111,14,7777777,8453,59144,5000,169,534352,204,34443,7000,4200,81457,252,196,13371,200901,223,60808,1729,6001,167000,7560,1329,1625,1135,33139,42793,48900,480,2818,1923,146,177,57073,2741,1868,80094,130,1514,232,239,9745,2345,98865,747474,43111,999,88888,4326,16661,50,4114,4217,124816,143,988,2366,4663,369],\"metadata\":{\"name\":\"\",\"description\":\"\",\"url\":\"\",\"icons\":[\"\"]},\"projectId\":\"2ae562535b08b12ba6692b8e12a6b84c\",\"themeMode\":\"dark\",\"themeVariables\":{\"--w3m-z-index\":999999999},\"features\":{\"email\":false,\"socials\":false,\"onramp\":false,\"analytics\":false},\"defaultNetwork\":{\"id\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"blockTime\":12000,\"rpcUrls\":{\"default\":{\"http\":[\"https://eth.merkle.io\"]}},\"blockExplorers\":{\"default\":{\"name\":\"Etherscan\",\"url\":\"https://etherscan.io\",\"apiUrl\":\"https://api.etherscan.io/api\"}},\"contracts\":{\"ensUniversalResolver\":{\"address\":\"0xeeeeeeee14d718c2b47d9923deab1335e144eeee\",\"blockCreated\":23085558},\"multicall3\":{\"address\":\"0xca11bde05977b3631167028862be2a173976ca11\",\"blockCreated\":14353601}}},\"featuredWalletIds\":[\"c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96\",\"4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0\",\"ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18\",\"fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa\",\"971e689d0a5be527bac79629b4ee9b925e82208e5168b733496a09c0faed0709\",\"c03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a\",\"1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369\"],\"sdkVersion\":\"react-wagmi-1.8.7\",\"siweConfig\":{\"options\":{}},\"caipNetworkId\":\"eip155:1\"}}}]"}},"response":{"raw":"HTTP/3 202 \r\ndate: Sun, 26 Jul 2026 14:36:53 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a21423a4582ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2780,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":4,"connect":13,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-fwa.fun/logo.svg","fqdn":"votes-fwa.fun","domain":"votes-fwa.fun","tld":"fun"},"ip":{"addr":"104.21.88.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.445Z","timestamp":1785076610445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-fwa.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 12:55:31 GMT","end":"Sat, 24 Oct 2026 13:54:11 GMT"},"fingerprint":{"sha1":"04:8F:1E:BF:CF:58:5C:1D:BB:08:E1:20:1C:BB:1B:D8:44:CC:E0:A7","sha256":"62:26:AA:67:22:93:D2:96:C9:39:BF:84:AD:91:66:25:AD:2F:27:CF:7A:F8:B2:10:54:FA:D7:A7:4C:23:8A:6B"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: votes-fwa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://votes-fwa.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 14:36:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69fcc640-136b\"\r\nlast-modified: Thu, 07 May 2026 17:05:04 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFK%2BVej2O80qSHDpt0MquNVF8%2BvStZaG6RtdJ0VCR%2BEywZ5E1L63Z88WnYW6hlKVTN93zciCnFhSrjVwr5%2Bs3Uw45W%2BTwhDyCVNx3XiejOsFxLPVLP8tlXM4Iem3oK9o\"}]}\r\nage: 877\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a214238f4ba7569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4971,"size_decoded":1920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aedfdedb81d25741a1b50718d80dfd0d","sha1":"9ac694c3f1218b35341b2bb3d52b9a7503133323","sha256":"d8b21d8db7a2ff29817880d6c46e11e9fb9b99895a5cd888e4d54ce46d0ee01c","sha512":"56b2a61013795dbe9c464f2a782148862ec26af3d6df3c8e524ba73efa8c0db6a0cd1e2f7da655492e24343d47d8462bdd3ffddaa128ce4a4bc42ebbeff2170f","ssdeep":"96:JiJogxVzTGdAHbtXsH12F6XllJ/p/V/x/c/O/nuzxIJEpEgExElEOEFArbTo6Aa:IJogxVzTGdetXsHIFIllJ/p/V/x/c/OC","tlshash":"45a1c045691520499fca0351c3cf4bf94938af9324362ca5f3c7118f9d909ac63beb6e","first_seen":"2025-10-20T22:24:04.144709Z","last_seen":"2026-07-26T14:37:55.040166Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.937Z","timestamp":1785076610937,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://votes-fwa.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6R6xWYgkd5lRfK9aF2vFTw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: oJ9N68J/LUfD4R1najtyOdgiM/U=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":72,"connect":89,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://votes-fwa.fun/","date":"2026-07-26T14:36:50.947Z","timestamp":1785076610947,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://votes-fwa.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: C8IMsyBBxp1YL0/laMB2tQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 7qt5sDec0tJSQ2gRCq02hJG/fgY=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T11:41:15.364973Z","times_seen":17562232,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":267,"connect":350,"send":0,"wait":86,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}