{"report_id":"88af5460-14dd-44da-acc1-f8fd3f80a10a","version":0,"status":"done","tags":[],"date":"2026-08-20T12:59:40Z","url":{"schema":"http","addr":"marketsupportvote.xyz/","fqdn":"marketsupportvote.xyz","domain":"marketsupportvote.xyz","tld":"xyz"},"ip":{"addr":"172.67.138.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marketsupportvote.xyz/","fqdn":"marketsupportvote.xyz","domain":"marketsupportvote.xyz","tld":"xyz"},"title":"Vote","dom":{"size":6599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (301)","md5":"1aba287e48282160796a2d97a9b1415c","sha1":"b335a8f52105bc571f292fde4374922d5f050119","sha256":"52021cbf272159594fa0660850845310349750529627fb956885b856265d73ef","sha512":"0e54c70a492faecf2b2cc9f9343eb8c8061400f9ab3e293948c7cc168f321583c93a63e3e7a3fcb958249cc50b6623a8e12c85a9eb96acb495800a80f4c887a5","ssdeep":"192:WlVT6x+DkjOqabkMvo7bHyGDHtkkKUBdSGXgUaDzpaJ+3YeC5:ClGui","tlshash":"07d194b36be7062e2633865827e7bb0c9764d10bd509dc507acc22c88f859e8d5e375d","dom_hash":"domhash1a7ac4876605f895d5d9cb190496303d","first_seen":"2026-08-20T12:59:43.425884Z","last_seen":"2026-08-20T12:59:43.425884Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"marketsupportvote.xyz/","fqdn":"marketsupportvote.xyz","domain":"marketsupportvote.xyz","tld":"xyz"},"ip":{"addr":"172.67.138.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T12:59:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"marketsupportvote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"marketsupportvote.xyz","ip":{"addr":"172.67.138.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-12","domain_rank":0,"first_seen":"2026-08-20T12:59:40.986048Z","last_seen":"2026-08-20T12:59:40.986048Z","alert_count":1,"request_count":1,"received_data":7443,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"marketsupportvote.xyz/","fqdn":"marketsupportvote.xyz","domain":"marketsupportvote.xyz","tld":"xyz"},"ip":{"addr":"172.67.138.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T12:59:14.241Z","timestamp":1787230754241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marketsupportvote.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 21:37:34 GMT","end":"Tue, 10 Nov 2026 22:35:07 GMT"},"fingerprint":{"sha1":"1F:23:C0:C8:3A:C8:34:27:06:6D:89:2F:5D:D8:BB:F5:BB:EE:5A:E0","sha256":"62:51:B2:C7:1E:01:3A:2A:ED:42:E9:3B:4B:28:39:06:3C:DA:86:C8:03:67:6D:31:C4:CE:26:77:C0:D9:09:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marketsupportvote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 20 Aug 2026 12:59:14 GMT\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=0, s-maxage=300\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FyD9teYtcxOB8M0ntTLVniz3ac3IfPzRyt1Zrek7g2WyRCrMhn%2BX6VP70TURsTtzWczdWnUpZ8n60uwIXHVUIoRKXp6q2cWDvhRQUXdGUCt3jVHrOzmBkJEShvwD43xy2pVqrXyC%2FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2e192f69d973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6762,"size_decoded":3190,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399)","md5":"c108e07cea9918feff7de6dfae2e0b8e","sha1":"d7559926b73f465d2a640a89325a75e28d585d1e","sha256":"585f87e862d69e3ddcffb400f9b960a74613b7ca70e4d4045b8ecf341ac9c4b4","sha512":"98bcaf32046cda39a942326206b4e052d12b21823b95345ffe18680e35e1fa51fd1cc78ef3c8003eba9a529fede1b4c8519a6335f7e4977c56a8a037ea35c667","ssdeep":"192:sZqT6x+DkjOqabkMvo7bHyGDHtkkKUBdSGXgUaDzpaJ+9Iv5v:XlGwq","tlshash":"90d1a5a36bf7062e2533896827e7770c5764e007e609cc547bcc12984f85ad8d6f3b99","first_seen":"2026-08-20T12:59:43.436735Z","last_seen":"2026-08-20T12:59:43.436735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":73,"connect":16,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"marketsupportvote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}