{"report_id":"7b997125-b547-40ad-843b-8f5f29d2bb0f","version":6,"status":"done","tags":[],"date":"2026-05-21T22:30:59Z","url":{"schema":"http","addr":"voteaster-dex.com","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"172.67.155.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"voteaster-dex.com/","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"title":"Aster airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T09:07:10.188554Z","times_seen":17758850,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"voteaster-dex.com","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"172.67.155.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-25T22:30:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-21T22:30:32Z","timestamp":1779402632,"ip_dst":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-05-21T22:30:32.797179+0000\",\"flow_id\":179334338318230,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":39208,\"dest_ip\":\"104.21.86.84\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"wispy-bread-2c7b.perlearbitrary.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3486,\"start\":\"2026-05-21T22:30:32.790422+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"voteaster-dex.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-05-21T05:00:30.858883Z","last_seen":"2026-05-21T05:00:30.858883Z","alert_count":48,"request_count":16,"received_data":6398255,"sent_data":7858,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-04-30T07:06:59.452956Z","last_seen":"2026-05-21T05:00:31.386911Z","alert_count":2,"request_count":2,"received_data":3793167,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"voteaster-dex.com/index_2.html","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-07T00:51:32.33266Z","times_seen":1955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/67f4a76d-5a9e7df06057.min.js","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec07eeca8ced1549679036a6a80c865b","sha1":"447a7bfab2e861cc10944b25ce4c1158ad00014f","sha256":"5f2c44122f16c4d2c991dfdd74484233a87dd071a3e939ea5c2f6847efc4e5de","sha512":"16a041e95274ac52ac27bb0d18d3ac651cca41370a8a404febc47e0a3dfab88e1c1261f1bb301fe39ea569ed4574818ed0a3c1efae79df8e78df20ce8553934a","ssdeep":"768:OSG05bc/j9R/nwcQQN84JjdcufYrW9hci5c6wcKnWGdrcWdzYUW98li5c66c3JTD:sx5N88HtJGdrxU","tlshash":"9f43b5d41916cad48e5260cee877f815f8644a23cd6df063e6acddc2781dfa2888717b","size":60527,"data":"","first_seen":"2026-05-01T08:24:38.802449Z","last_seen":"2026-05-30T03:55:59.777883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"330959b74de9c6eac3d437fb4adf2d5b","sha1":"f3ac79ce143b29f04133f158bddecdc22afb25c3","sha256":"ec53f765fb2eb18270a826366af487694ec30a35eb92526aa03e30a457dc87ab","sha512":"4d84abbfe965c06259eba317cbb039c629665ea20269b9da4ce1d32026c6ab71b9d9e751a280d60171a10846ee138a4dffad2c936fb09d413980d923a0904cc0","ssdeep":"3072:9gnHgnrG7Wj4UqnzJ6D5+0siMPEB7Wh2IU2LKyj3sK/AUHnGokxa:tjPqFISjzg2L7syHGokM","tlshash":"fd8475c5198641e9ba1a029dccf2ac44d4404c23fe5ce5a3a9defdc1752af6191cb3af","size":378518,"data":"","first_seen":"2026-05-21T22:31:03.606512Z","last_seen":"2026-05-21T22:31:03.606512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4e2977b2c47ccd3abdff9aa48b1b40e4","sha1":"0043941d04a6961b13d87da515cf14bceb76310c","sha256":"04509edbffbdd7c55f2b30decb02957857b0a8eb45cda64559eb579071447ad7","sha512":"7d316ec8d393e75ff91145a0a77f195b44ffea8f67adf093c22040f8170339edd404fd99d63ac5fbca4f5526e610ed4937a3f55239f9b0ec8cccc3c7e1abeb4e","ssdeep":"3072:KoLvoLLZh5vid1h6B1eE0S0X8hDGZmg8+jyij386HQcR/HBGQGPY:Ghkh6gzrg+jz8azGQGw","tlshash":"36545294cb9780cc8e69129ec0b2b849d4409d23de5cb593ed1ecdc1366ab6691cb27f","size":297402,"data":"","first_seen":"2026-05-21T22:31:03.622624Z","last_seen":"2026-05-21T22:31:03.622624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3431e61d7abb3318db44a23d8d242cfb","sha1":"2bdff65ee69d88f65c208f5658d8cf2e17c90da8","sha256":"58e358cba411e2ee5883fd4fc0d2e3c681fc80516ee0ae2d0f8392c441ace463","sha512":"6ad5aa82acb81be5dc6c3a9ae94939d9ddb425db58a1fb02ebc6819a346d986c7cbbb8f1fb8bb1e77e6a67543c59e363f2aafc15406f46a7c76be553ceb36e0f","ssdeep":"768:tfrZ8hEq3tzcFYDD45cOcNctcccYc+c+cTc8cXSRCNcz7cgXdVtpd6Rc2hql+z2e:tGhzTESR1BVsml+XnJ+ra","tlshash":"0d7300d09a4bd4e88e6610eed037ec01e4281967ceacf193b92ddec2741df66858753b","size":76434,"data":"","first_seen":"2026-05-21T22:31:03.624318Z","last_seen":"2026-05-21T22:31:03.624318Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"voteaster-dex.com/index_3.html","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"moz-nullprincipal:{c2cb1a90-563f-414c-9fce-9c2cc4f7b087}?https://voteaster-dex.com","date":"2026-05-21T22:30:34.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 63029\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zQ%2FLfydy%2F3NBh5YO4RC45qrOZY639Y6zEzRY7l%2BTU%2BT0%2FfQ1%2F88x72C8RL4JN38CFlahp%2BXdDqJnfPHm7nsbE2duEVH96T9CnDHnOCMkqYo0yM6FIgKPEcL5gTsAQu0gI%2F9Cg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ff706bf6b1f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T09:07:10.188554Z","times_seen":17758850,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/css2.css","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: W/\"6a0486eb-248c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=te9ouj7BV%2BuP0Gc%2FzaUUcPozDblQJqR14UwYvcUhSLAXA1K1tHAgUI%2BwWSqliiBw9jDxqGkivf7ywbOSjRAH1StrHTrLh0%2FrG1A6dDRMJz5B22DIL3Q85Sd7fDyO0xgbc5AmWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b6cd2f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"310b28ac0694ea5a892838cb457e3750","sha1":"7dceb9fc0a5ace4cf71f08c1015af7ca2746ccde","sha256":"3ff2c95fc141d01291081693b69aa66b118d8c728b0fc2b1a7e5f1ce853e8b01","sha512":"f775bb5efad16f85d3b2d06334eb09fd591032374930f20c03d64f5738d90a5488f6c088d4f0676e88be5b356988b12ea25644c7bb85b77976a173400a28f66a","ssdeep":"192:9GNtfA+34ffDRCOBYTi3/sb8MUrDxQg3i3hlBRESCop3R58Gl:g3ZdUfXHVYhJv","tlshash":"3812de90002b5100d79b5cd567cf3f26aedc32486045da7d2ffe0989aceed6543a5b8e","first_seen":"2025-06-29T03:39:18.303705Z","last_seen":"2026-06-01T18:46:57.593086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/67f4a76d-5a9e7df06057.min.js","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /67f4a76d-5a9e7df06057.min.js HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: W/\"6a0486eb-ec6f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQ9vXVg1TXwCxBO3uPHqvlJWa8NAEaWINk3N9vMVcKtGXs88RuNt%2F7NvdKCqgte0Ui5plsI%2F4c2alrQwg5d594ndRR2SDSCyqj7V7b3gt6cBp8P4N8v0DDWeqPfUq31%2FVq374Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b6cd30569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60527), with no line terminators","md5":"ec07eeca8ced1549679036a6a80c865b","sha1":"447a7bfab2e861cc10944b25ce4c1158ad00014f","sha256":"5f2c44122f16c4d2c991dfdd74484233a87dd071a3e939ea5c2f6847efc4e5de","sha512":"16a041e95274ac52ac27bb0d18d3ac651cca41370a8a404febc47e0a3dfab88e1c1261f1bb301fe39ea569ed4574818ed0a3c1efae79df8e78df20ce8553934a","ssdeep":"768:OSG05bc/j9R/nwcQQN84JjdcufYrW9hci5c6wcKnWGdrcWdzYUW98li5c66c3JTD:sx5N88HtJGdrxU","tlshash":"9f43b5d41916cad48e5260cee877f815f8644a23cd6df063e6acddc2781dfa2888717b","first_seen":"2026-05-01T08:24:38.802449Z","last_seen":"2026-05-30T03:55:59.777883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/a4903a956a84a1d4caf637d0a0ecb5f65b0b5d53.svg","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /a4903a956a84a1d4caf637d0a0ecb5f65b0b5d53.svg HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVSGGmdi4rMajHpIFwoIduw9xCmShZKC%2Fni8j7R6p4F3bgF8TuVJGxixTIj7EENboh6Si9jylgz%2Bz7qo0xMTNzDLWjlthjbaE70XeC5wpj2mY9pfAuAKTA5nHd4NJXWdnOuBPw%3D%3D\"}]}\r\netag: W/\"6a0486eb-12c3\"\r\ncontent-encoding: br\r\ncf-ray: 9ff706b70d5d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4803,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f9e198f05523bcca4b508cfff77f341","sha1":"a4903a956a84a1d4caf637d0a0ecb5f65b0b5d53","sha256":"4e3a9edb0c107290610d1583aa3cb7bfc8f0b117e7bd07876425ad057b8b4e4f","sha512":"09b4f0723c656908fb221ffc30c2cb88915708423801540cd984acb9010af72aadc965e56b6ee617fcaaa2bc79a86ac56007fef7bad855d4951ad6c460b02d37","ssdeep":"96:Ox54g8YOpC4oVJZK8bIq7YNFpicDNkdmGV6Ph:w54N/CJDbI+YNFLI2","tlshash":"c5a182f9a7fad5e0ee14f3b8ca12d94a346b24ff9a85cf55c390be1824210cd084e9d4","first_seen":"2025-06-18T19:58:19.063768Z","last_seen":"2026-08-01T19:06:45.068745Z","times_seen":242,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/61fdd268a7b95706c26ba67b0e7831366cf665c4.png","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /61fdd268a7b95706c26ba67b0e7831366cf665c4.png HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2297\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: \"6a0486eb-8f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLdYU50vxIGn8OGIbf%2FBOGzxpMH%2FANLT6Tp3Pumc7k4Fw1yqJNjJ84zO%2FgCK9r0zeItzvvgazU%2BpcR3QH0YcWc%2BISa8UOG7hDp8il%2F%2F%2B5tJEg%2FVuMWA%2BnXn9ystQrcBl5H4CwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b71d63569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 78, 8-bit/color RGBA, non-interlaced","md5":"cfc3f805b1b7bfef518b54617dbdca36","sha1":"61fdd268a7b95706c26ba67b0e7831366cf665c4","sha256":"39f32bc8d98f625908b59a56f97fed24ccead48af0466cfa3be6da0de022ada3","sha512":"be675cdcd973541025d053feeaaef97580f8f65d7eb45a703b887cccfc06c128ff01b1276c5d4a6166d47efdddbf54ae2d8a997c3e75849800148a6ec5fe93a6","ssdeep":"","tlshash":"ee41c6952df079e1d0d529b10dc2420a49bb8d87388de58bb3ec1d932f9d950925a7cd","first_seen":"2026-04-17T17:57:05.286395Z","last_seen":"2026-07-08T20:39:44.393644Z","times_seen":33,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/index_1.html","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:33.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 63029\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5BhgC%2F6SkoAUjUCJBBZ5aNo1IlJHbk%2BqE09pdPCRAWGcRoIKazGscfCkAhn03im3NSp2M2Adi63Q6H6sF0fulyX0RTyjpo0XRhi3gofEwonIUAgsFT9cjUWGz40RjiZRTNt7A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ff706be7a82569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5d4142ec2eee70ff05b00185396d3dc7","sha1":"a8f1fae3f06e43dab718f3fed7ae98c4a38136ed","sha256":"d8b17df8373c3b3b710d45c0d6c99b26c6117ee28a385fdca15969188c75e033","sha512":"db63619048c244b7e76316d63cfd42090237f0d33edf6436f616c64432cd05a0546b2bc8a177ed8af35e4d7ebdc3cb42f7d2f945c914a3623006a316eea9ddb5","ssdeep":"","tlshash":"48c08055d475250978516be41685d15108c1d42962215d0438fe7574db5d6235413dc4","first_seen":"2026-04-01T11:55:02.223964Z","last_seen":"2026-05-21T22:31:03.602023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-21T22:30:32.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpU2zOa2h1AdxTwOsPa6CiPRiKSbIR%2FcGBn5fTMiMG4%2F9hhMAxHtQF4DbBvjML0USr%2B0eKdPWukhY9hWOW%2B6FW6pK3SrRgusa4XZO6%2Bg4jPFW%2F8unEoycbE1mAfmtUKrg%2FkSeQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ff706b3f8fe56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458717,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2310)","md5":"963fb9faaf3f7da3723c6eb14d5b3fc2","sha1":"3dfa63cc88e979d3418d44053c4faeb266c021d8","sha256":"e17649d46d3bf1a7a457500a13e7d287ed475beff559897f95e74d26912cd66f","sha512":"68227dc374c6fb6d016d97c6b36f4d063bd833d07b5e7556b67e147367c9544957cc2c73163216e6d3d14ccae2ea0eb3e44e3d577643a680ff13691c7a5e678e","ssdeep":"6144:sI7s2lCZTCZqTNAuhvBaA+78fpENCHCUuuh08yDwX69q+Lp:spNAuhvBaA+78fpENCHCUuuh9yf9q+Lp","tlshash":"21a4625e55f311652c57b0b867efa258a235e087de1ecca9becd2050cf893e0acd6358","first_seen":"2026-05-21T05:00:34.247554Z","last_seen":"2026-05-21T22:31:03.602554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":40,"dns":19,"connect":1,"send":0,"wait":248,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 02:19:25 GMT","end":"Tue, 23 Jun 2026 03:18:07 GMT"},"fingerprint":{"sha1":"A6:25:9D:4A:38:D4:2D:9F:E1:29:70:71:B3:2D:9C:3E:58:44:59:4D","sha256":"86:A4:C3:14:AE:CA:53:F7:9E:A6:7D:9F:5A:F4:AD:96:1D:70:F6:30:92:10:57:FB:6D:D8:0F:DC:C8:18:20:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 22:30:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=puQKDcC4pBgMF%2FYeMcI7SHnVS8LyzTVsJq99aWBz0A6THrRN6WjEd6TjsWM%2FWn8hbTEkIyMfgGu5ymwOQSTvpOnVy9ffnX4B3VvwTTCQ3T2ThQROO8bRPfhAjq%2F0d3IsX6D8XRKizKveLK1gZlmsvVGcIp0MtCaFUs6T5ebN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ff706b7198f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378518,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"330959b74de9c6eac3d437fb4adf2d5b","sha1":"f3ac79ce143b29f04133f158bddecdc22afb25c3","sha256":"ec53f765fb2eb18270a826366af487694ec30a35eb92526aa03e30a457dc87ab","sha512":"4d84abbfe965c06259eba317cbb039c629665ea20269b9da4ce1d32026c6ab71b9d9e751a280d60171a10846ee138a4dffad2c936fb09d413980d923a0904cc0","ssdeep":"3072:9gnHgnrG7Wj4UqnzJ6D5+0siMPEB7Wh2IU2LKyj3sK/AUHnGokxa:tjPqFISjzg2L7syHGokM","tlshash":"fd8475c5198641e9ba1a029dccf2ac44d4404c23fe5ce5a3a9defdc1752af6191cb3af","first_seen":"2026-05-21T22:31:03.606512Z","last_seen":"2026-05-21T22:31:03.606512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":47,"dns":30,"connect":1,"send":0,"wait":501,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:34.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23664\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: \"6a0486eb-5c70\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 63029\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH4wUbQxwK3XlcA4rNwDSK%2FPNnekROV%2BzcRr8BorG%2FlfUEyGf%2FrOk%2BI5rse4xNAUA2NUu72XpzICiHnCE6tMMaXivqpJcqDbh5MYcHaXPpkc1DYAU7olvsFqBv7zhy5pFRwIcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706becacb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-08-07T09:00:28.995876Z","times_seen":16908,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/ce3d9ac1b8690eca80ba810d046b43ef35b8664c.png","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:34.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /ce3d9ac1b8690eca80ba810d046b43ef35b8664c.png HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 5247\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: \"6a0486eb-147f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzswKJOl%2Fn2bx6%2FrIoXq1XuuSlan%2BkWW%2BhNcs2FDl0%2F2WsD0smqXRHgnSVk9%2FoMHglhJWrbwflpzY%2B8QuSDY42JoZdqQ3XQwUA1BNrDUuCmhmWd3GAHDFyGtx6B%2BQhygzOvycw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706beeada569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"7ba2bec69908efb101d955cbf5000c3f","sha1":"ce3d9ac1b8690eca80ba810d046b43ef35b8664c","sha256":"e2618d45571495c1a7b083013b7e61f2c6c4d09756eb79dc37e98d7031231bc0","sha512":"1559676ed160521b6cad221380fa4d4bed416f87721f800dfaffe3922225013ac9be6fecd48632388356b5872a8c8b492dad2cfdcca0c07a3448bcce2056af2c","ssdeep":"96:HIWjhReM/0QSBilMSEfw66zD1lv6fOV9Txy4qafpWoujPIvxRttze8C7:oWDelBiqSAw/DnSkk4qafpbqPQVC7","tlshash":"eab19fbde314b91a407ebc30649bfd0d223a20609c2495158b9fcadfbc9cf2844a9613","first_seen":"2025-06-18T19:58:19.041337Z","last_seen":"2026-07-11T08:28:41.267647Z","times_seen":140,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/e06829682e0e9b9dde06cee8cb4395f8ae141227.svg","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /e06829682e0e9b9dde06cee8cb4395f8ae141227.svg HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXP0fRcGda%2Fb%2BFtZ79r2Y2chrrRg4rVAVQAv%2FBB0NXBp2ZzmFp2ZFRpd5FzaPP6ZHm25LUB7fzBagNZMU2ont1krDDZ49jwxBbeEd7RuVl%2FbXAKk6cmeVFbuPNka5eKvJ611Bg%3D%3D\"}]}\r\netag: W/\"6a0486eb-6ea\"\r\ncontent-encoding: br\r\ncf-ray: 9ff706b70d5f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"811c7e6ed6906839105c9ac31867c898","sha1":"e06829682e0e9b9dde06cee8cb4395f8ae141227","sha256":"6d3de5191fd3c0dac866324607de999b7feb18fc59f00c81319e0c013dcfc3ec","sha512":"29808f4c287fd36ef763a4ab78ff5df2511cff4c9db0072b80100a9d28276d813b2ccafaf6e17009a026bd14e70cf431ea11bdc56c906c137eb5c755781af682","ssdeep":"","tlshash":"3f31f12ff79ade23e154d75cce49e43a115702e79581a160c1e0ff2b16340cb2a5d8e6","first_seen":"2025-09-11T12:33:12.90346Z","last_seen":"2026-07-16T03:14:43.573067Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/secureproxy?e=jscdn/getFile","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:33.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://voteaster-dex.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://voteaster-dex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"6td9mte6w6fobh8xc67z\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CmLWeGjHlPWdlaG8yGdwVVFbcc%2FeGOowYSbddmlI8JHOx4K77sYN5fKfE%2BLgkxNYHkmNDAWV6Dia7GWdWm4UxrKbCCE0nAxJHCR3K8%2BSGKwcpwrqRE%2BJxEgjNKfC%2BRvao19YcNs%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ff706b95ec3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3433056,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16a887ce79eeadae849577ab8e2b6786","sha1":"6b0928e786ec4b1da4279c06c6bdf33f9eadd842","sha256":"8cbe4dbcd1a4b760c71a76d01c322fd10ca7efb1b83a776fbef3e866f891dd6a","sha512":"b592fc53df7156985cde9122e9b633ab94de8fe7015ab4f46718a063c6c7370397a4cf25f52d6dd341da186ffe8c2d86106ce4b657335fb6badedcc5afa01549","ssdeep":"24576:uScV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdSBh40F:un7OwPEZJsi1","tlshash":"cd2533501da7e9a94f8cba6674bbad0325845f0384cc94cfd9a7fdc0106877681eae4f","first_seen":"2026-05-21T22:31:03.611736Z","last_seen":"2026-05-21T22:31:03.611736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/06741354eb29af950d68c0c551c088eb2ee2c2e2.webm","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /06741354eb29af950d68c0c551c088eb2ee2c2e2.webm HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 63029\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwoRyBapaMujxhwmcUffBDISoY8y3N9I1uMN09%2FhDBt3GKi1ZoQl0bXYJX6egc3CQXZrTiOjAtQYqYn8x%2FlLdCQFDPQ9LOudoohtfNuryvUQtdO3%2F9rt8ncqnAW5iURD2LyIhQ%3D%3D\"}]}\r\ncf-ray: 9ff706beeae2569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458717,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2310)","md5":"963fb9faaf3f7da3723c6eb14d5b3fc2","sha1":"3dfa63cc88e979d3418d44053c4faeb266c021d8","sha256":"e17649d46d3bf1a7a457500a13e7d287ed475beff559897f95e74d26912cd66f","sha512":"68227dc374c6fb6d016d97c6b36f4d063bd833d07b5e7556b67e147367c9544957cc2c73163216e6d3d14ccae2ea0eb3e44e3d577643a680ff13691c7a5e678e","ssdeep":"6144:sI7s2lCZTCZqTNAuhvBaA+78fpENCHCUuuh08yDwX69q+Lp:spNAuhvBaA+78fpENCHCUuuh9yf9q+Lp","tlshash":"21a4625e55f311652c57b0b867efa258a235e087de1ecca9becd2050cf893e0acd6358","first_seen":"2026-05-21T05:00:34.247554Z","last_seen":"2026-05-21T22:31:03.602554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/?m=2965671","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:34.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 02:19:25 GMT","end":"Tue, 23 Jun 2026 03:18:07 GMT"},"fingerprint":{"sha1":"A6:25:9D:4A:38:D4:2D:9F:E1:29:70:71:B3:2D:9C:3E:58:44:59:4D","sha256":"86:A4:C3:14:AE:CA:53:F7:9E:A6:7D:9F:5A:F4:AD:96:1D:70:F6:30:92:10:57:FB:6D:D8:0F:DC:C8:18:20:45"}}},"request":{"raw":"GET /?m=2965671 HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://voteaster-dex.com/\r\nOrigin: https://voteaster-dex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:35 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvCbQiZCcwpSd2rbl40%2Bjxiz%2B8vklppPJENpjXieQnHi4qmHAdGZ%2BqIhmSKm7w7367p%2FLqJgj%2F2Ae3vk90dvjF8AG%2FISW6OsPmeN3t3HWhNnwDfE%2Ft88qQB7RZPCMN7AFHTEy0ZcBN22GGYuHJPZELoaxDi3CYWJkc7%2Bm5yK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ff706c03cd8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3413203,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b5cb4de81457c4f7b4c77dfd123a4a04","sha1":"a6f3f8ba68e7901d3d83c907a67b714721e1d918","sha256":"c684eedf0487457d93c5b3513a3d27e8a6f2934e21dbdb75577de4e79562447d","sha512":"1f702821d67a2b69c36bc7e17ba459b81e1cc263882c475c47acedbb2ac52033748ef84b54b898f48252a57b8e8c16f80a7d1040cc0e4d0d5fe2794a4904d429","ssdeep":"24576:iuV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdb5XSjV2:iu7OwPEZJsdJJ","tlshash":"612523806d57f99a8f8ca96eb4bbad0355401f43888c70cfaa35ddc421e867581cbb5f","first_seen":"2026-05-21T22:31:03.615924Z","last_seen":"2026-05-21T22:31:03.615924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":79,"dns":63,"connect":0,"send":0,"wait":777,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/06819da46a119a541dbda36e9a9eb47a68ee89a4.png","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /06819da46a119a541dbda36e9a9eb47a68ee89a4.png HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 142171\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: \"6a0486eb-22b5b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FE0%2Fgi1oqQfjaizpGg%2FnLLUkJ1QEp9yQ3zf36QIn8le0Orm9ocUHcKL%2FxG33LnXXQvjtcYb0mope5aK8hfvkimyZsgi1zBTdYREq12BGtWofnuEXmZ%2FrKswl3cqQp2l04mBGzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b71d66569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 776, 8-bit/color RGBA, non-interlaced","md5":"22b70ab1a57849b2d9229ea5f20e55c7","sha1":"06819da46a119a541dbda36e9a9eb47a68ee89a4","sha256":"b66c86f3a8fc126a563f582f85ec7e2bc36a4608d33b81e0777401114eed2818","sha512":"925f53ac647440f879a67709f1611dbc4e1b4173be31cee7014417417ed6225bba69c61862d6cd2a48ef04a2bf6abb6c723cfd387af6a975c681c512aab80c85","ssdeep":"3072:UOrY2fP7LgFIvLtU3JffWuVpnLQhvqTjv+6i++iJWUnhJIJ/d0RuYAS:UOrTHgoK38uVVLDn+nwnnIddrS","tlshash":"9dd3132ee8c062716d0d1b7e84c97c73050aedd7636aef3d4e3054eab9348923ba5547","first_seen":"2026-04-17T17:57:05.28014Z","last_seen":"2026-08-01T19:09:05.019235Z","times_seen":46,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/8bf52cd923388cf79bf44f8497d2f05d37fda897.webp","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /8bf52cd923388cf79bf44f8497d2f05d37fda897.webp HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: W/\"6a0486eb-19b0d6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CfSDPFN0Uioo2TOMh2NwizcOzxm8mVx5%2FbtP21IolybKTI6nWg5mzVw3nI6QrYgUKDM52g0gPqkb5RY4FtFB%2BkuUY0okZRBGurm7CA1wlRmxdGGaCF7S4KGKcrxr98p%2FgBhow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b71d60569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e2ebfd4e4542ee85b611f2e80116377","sha1":"b85c418266a0c5431a897f2a25af06fa1e1c85ae","sha256":"75a912b1e0c2a4c2d7d4f080e2b3536aa873f4e31b2437271021278eec150511","sha512":"07964aa6d09439e8a33ded842bb47d6a497b6b2414b705dc96cfd60312f946840b1dad5f40c47c9a90b5fd2b88a28bc3f442e2dafc7cf72db061db8bf0b6d0a7","ssdeep":"24576:54wj4HRLKHdoSF2qCxvpNk5ViBj04KI1/QR0E3SX6rr:54w+RLK9oSF2HRNtj04Zak6rr","tlshash":"4c252317e8525f4e917cc6e9a07c27ad4ea87f4d0317e0b1cd852005c8f1cbe6aa69f9","first_seen":"2025-09-11T12:33:12.904991Z","last_seen":"2026-07-16T03:14:43.57984Z","times_seen":93,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:32.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2388\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\netag: \"6a0486eb-954\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 63028\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBwC%2B1%2BRT9UcAogsnd0%2BehrxO%2Fw%2FpT07%2FCD6jLnHVkDosOUWr2UmLgr5WSVl4DWf9k2kaUWGCZzxZhy%2BjcIjKPSEFe63axmgSVMOJ%2FX%2F9tq1RIuYvqupmgQuYn%2B7KY%2B%2B0wqgNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff706b71d64569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 68, 8-bit/color RGBA, non-interlaced","md5":"a2baae138966c94954ebc32cb9e8e0a1","sha1":"24a16cebd7e30f6458aabc37a83b37cceeeabd4e","sha256":"a9b23000d64c8f88f3b58854ab92bfc3e1bd01c3972b75f6f22b98d9a356584e","sha512":"3dfa8b76995d907be13b0091cf2093d2ebb54ac9fb67aa828d3f5638610c77ac3d04e54c01093830738d9d9ea3e4349af52462399fdc447410a1ffa03d7ebca6","ssdeep":"","tlshash":"be41ea991ef1a5b2e1d426b14dc6424609b38a876c0eb0c37bdd1d532fcec2421ab7cd","first_seen":"2026-04-17T17:57:05.279222Z","last_seen":"2026-07-08T20:39:44.380616Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voteaster-dex.com/index_2.html","fqdn":"voteaster-dex.com","domain":"voteaster-dex.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://voteaster-dex.com/","date":"2026-05-21T22:30:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voteaster-dex.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 13:18:27 GMT","end":"Tue, 11 Aug 2026 13:18:26 GMT"},"fingerprint":{"sha1":"A2:AA:31:E3:BA:84:0A:52:46:3D:43:51:B5:15:D2:CC:C6:E3:00:E8","sha256":"30:A6:DA:70:89:C7:A1:79:F3:4E:B4:82:E6:EE:16:B9:B0:8C:77:4B:70:C1:35:92:F1:B1:40:C8:BF:9D:68:D2"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: voteaster-dex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://voteaster-dex.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:30:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 13 May 2026 14:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 63029\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UziPMfI2uParAI%2FE3hCcoDGCkj1ady3%2BDtUgS3Byx6DHNF7DyzAXWq639k9P0pWW0JXWavhOtpM537HFd%2BnzbOnvd7yIarasW%2B%2BGZ0eK2NodUzzeXOx93gA3qPpCI3lzNwu%2Few%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ff706be7a8b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96436,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65090)","md5":"d99e73de8d62847eaa14bc8a7a5d4c32","sha1":"ec6917a260825c3dbad13ace696d0fd938eb8595","sha256":"31b2e5290c82b9128d40df92bfc25b23a45d7c508cb5c1758673a50485cf2c5d","sha512":"b14991fc28c8861d6cf5fac0a29139b5d362a2ecd2239e8661ad1d91d9c7b41d37c51d9f8268145cd35786f56fb611a28915a52b90a0f3a98465c2edeb222295","ssdeep":"1536:/G3hkm08k5hHIPcnb2Pat0NArSWxDhbVJ/t:/G3hkm088Ucnb2it0NArSWxDhbF","tlshash":"2e934f1db752003f3c2780f9e29ce9ad911671c4ee3a6ae7bd8222118bd57f75ca3254","first_seen":"2026-05-21T05:00:34.25343Z","last_seen":"2026-05-21T22:31:03.619754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"voteaster-dex.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"voteaster-dex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}