{"report_id":"97b6b8a6-d0dd-407c-819d-7a166de214b8","version":6,"status":"done","tags":[],"date":"2026-03-04T13:10:54Z","url":{"schema":"http","addr":"votes-dreamcash.xyz","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"title":"Season One | Dreamcash","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"votes-dreamcash.xyz","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:10:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"votes-dreamcash.xyz","ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-04T13:10:32.072827Z","last_seen":"2026-03-04T13:10:32.072827Z","alert_count":10,"request_count":10,"received_data":8102536,"sent_data":4835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-26T12:11:58.094577Z","times_seen":1914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_2.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-26T12:11:58.094577Z","times_seen":1914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-25T17:44:16.785562Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_1.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-25T17:44:16.785562Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:10:30.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:10:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Feb 2026 20:28:18 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiDIMuaNlMfG8heGfPreLpoCl2gpzVZyDNr13UPd%2BMg%2FwTd085kNZJPDft5L%2BD4LTTM5QWzECU42H4HaVIrkXGP3rSfLszpJc3bImy0OnMawdyQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d711f1aa9a2370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42354,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21543)","md5":"227240068b0281899a1dcfb9fb12705d","sha1":"ddde9834758ff7d2c37e7ca46b77eab9b6a03d90","sha256":"55d3aab8d54f6806399417a02dbf6436a046df135b87c269a269bd257dba1dd5","sha512":"4beb0bb56d180334f05f37fbfab3de31bd32bbdef657c9021fdb767a6f153ee2850f789de1465d562383982980b25a6d94194bed6491a24fd1e4b4a65ef47609","ssdeep":"768:Lt0rGV4xksc64Jysq7vdKgTDnxUuoy/Lv9UetoRvWd0z9vzoCx:5ebx/c64Jysq7v4gTDxUuJ/NoRed0hvT","tlshash":"b81319e0f80c023d2a1f9959fd89ee6ca211b141af155861b10dc096fcd7fe179fae16","first_seen":"2026-03-04T13:10:35.682393Z","last_seen":"2026-03-04T20:09:05.422785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":51,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/7791eec01534570a.css","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /7791eec01534570a.css HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"699a0d8d-1d920\"\r\ncontent-encoding: gzip\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QP2Iv3NQjn8uRECgYCiZVa7j95ufL5hYyBm50kg4aIpw69IVDmrHLl8R%2FCbf85GMVIHpvWwOxx4ZF7a%2FFeRhtNXw3O4HP7icm4fHEsgbnmFZ9ak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711f1c4b6a51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121120,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64751)","md5":"aa23eff879729dbd2d979567ae9eacfb","sha1":"0cded95262b221d4e1a120a75a0f133bf0ee8c18","sha256":"fa55dafd96f28c206c61998fc5297980809ebdb81e39bf52822ec85b5f193d1d","sha512":"ccc5c5ef202c66e0d62b09ad0b90c253490fc1dc9a17c040c6be10ea2e55f6f4158a7a044c7f036a80435033d31287bbf96f631256e807a6cde212fac008fb2f","ssdeep":"1536:RJdZsLrnV03DzApdqRPtncHlNw6445VlEO7SmVUd3nCiHEDNXorrKmxMglFk:RJdZYd443lEO7SmVUd5Va","tlshash":"9ac353e8f610e57b6c37aaae13dcd65ca224bc069e0247dfbf15a08516cbff215c2614","first_seen":"2026-03-04T13:10:35.657349Z","last_seen":"2026-03-04T20:09:05.432997Z","times_seen":6,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/assets/eleven.js","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 21 Feb 2026 03:29:52 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"699926b0-764325\"\r\ncontent-encoding: gzip\r\nage: 83\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JH1Aj%2BK1iEYq3uSJYg3RYihhFLJvGfN9S9af4nh%2BDtjMn%2BH8cQciXcnziNvGEiBe0w4sG52jyF%2BhhrRwF5AqDJ9J6F7E4JZvm%2BLBv30aalnAK%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711f1c4b6b51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750437,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3da65c187a23f1a6d8d51f23810b2ae0","sha1":"7061de0e6f09d4ed1a69c2a3209b6501c9904c8f","sha256":"8ee5c7ae26904c3aac81c5de792f3a8e3a6de0d3b9037d31e91c8a033338e6bd","sha512":"62c139e3938c8faed7c50044eab73b4297ea13cb408631533db5bdfd20a7b00235f2683cff5f766ce61e94131f7f8ff82a14baf45051b37e4a2c46b895d6d3e0","ssdeep":"24576:428tHPYfbu7W152TlNJvleNRlPpg+8r/QR2OFnniOflYTwrJfowV7HJ8X36r5lD6:42I9tkpPpg+8r/QR2OFnniOflYTwrJfW","tlshash":"0d25f8ce2d99e56e015239b73d27209be06edc08715ccae0fb99bc34f85831d58b7a58","first_seen":"2026-02-09T00:41:26.532086Z","last_seen":"2026-04-30T11:04:05.824262Z","times_seen":134,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_2.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBereuNvpt6slgHFsvbrOkeQTQjUvGsCx4%2Fem1yNUzetarcsN6pWjimp5b3JRdR5q3Tpd9lXa1y26DOauDebqUHoJxDrZDP1WUwmEe2mdAOHlis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711f1ceb7651e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1410), with no line terminators","md5":"73fe47150429077c60bdf9c3183a05bd","sha1":"237e94630a913293b765e5f5fecc4d10de3063a4","sha256":"a5c54e66d1f12192b981038578e98f0c460c13e3d8375dc4d16f04ca786690c6","sha512":"e9572dea90b2264ee860f4cc2445461a3332d8d9391aa454f08be8252412e0828733ddbe30f20774932dbc6d985a51b18f425582fb752d20028d9bdce9fe992c","ssdeep":"","tlshash":"2221b8e27811fd19501b73e9dccea04da513fa1deb001cc8bddea91ec9ba93d111589c","first_seen":"2026-03-04T13:10:35.662514Z","last_seen":"2026-03-04T20:09:05.426192Z","times_seen":6,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_1.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMMujR7rZLfA6sgi3Q%2B2JFE4TyUsO7B8PfMocuIJZ7iIApoTjqSlcZyZYQTCrlDD5g63%2FKwFgIzbdspJqaLLWCk3qn0ZRYkD57RAsr5sJXnxNuQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711f1d2b7c51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56901,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56895), with no line terminators","md5":"094df2e915ac60d4dceb5a885b17f9c1","sha1":"cfe648227666fb1efbebee015608cc8937cc2b95","sha256":"c9382e69674decb42e78017e6308af281ff7f78da2c13e041c99208d8d78dbe2","sha512":"9ecb427326528d4309cd0946602307b088d5a68b45119451ec0d6ddd8aceab029b58a1b75075fae9b4ee8c3a3e7b2d975361e37bb0a8d51404aa355ce25499a8","ssdeep":"768:uLWuNa3v7s4uiznLWuNa3v5JuiHC0MD88BORpmalZuUJ9vzoCx:8fa3lfa3ecnuUnvzoCx","tlshash":"1e43b7135aa05beb700bbb7967a0b6c4b2239b035f25b3e7e15803b14f8d5ae1e53345","first_seen":"2026-03-04T13:10:35.676215Z","last_seen":"2026-03-04T20:09:05.42777Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/access.png","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /access.png HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"699a0d8d-ad7\"\r\ncontent-encoding: gzip\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoeQIMvVPMOSJXtN7OsJeErzY6aiavYBKXHqH6Sx1%2BxarBOWu%2FI%2FtIASa2GDHup2Okw0rLOIK6lDZITnW0fJwIuG90lBKXOojH0oQuv0eFj7IJo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711f1dab8a51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 103, 8-bit colormap, non-interlaced","md5":"0d84b8bb66ca9cd9c8328a90782c4e13","sha1":"c9bd74304d52a46bcc6bbdebfd5223b6d2d89021","sha256":"88be64af7e9c592bf6fbb33a9e1a0357165c32630659d705813b0a304b6ae22d","sha512":"834f12a6b764a602562eb5c9679dacbe572924aaedc4f28df3c9c6437245666b490ec59e052400a54c1ae4366f22dd3735740d836dbd9dd14a63784cbfa72b2d","ssdeep":"","tlshash":"d0517cb7ba1b202bf77b5db877126cbee2740020aa13d373c0bd982963105c40a91f8d","first_seen":"2026-03-04T13:10:35.668335Z","last_seen":"2026-03-04T20:09:05.435489Z","times_seen":6,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_3.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/index_2.html","date":"2026-03-04T13:10:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/index_2.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FumydlaPv%2BqGMztnhIju4jt4SGQCv4Puz8TkX4XIIptfVzvqAAvVLQyeJInsErlg62Zs28AJeTVw8aZ0yg8m0sTshVBtHK7IwIu%2BFoWezdSo5dk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711f1e8b9951e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3762063e0643915fe267822ed73a3fdc","sha1":"7697ebe1c64f3751a8f9cecddb39e64378f07706","sha256":"1bf1c9d160ef57f69eef1dafb70d2248f30f6766db11e132efee53f789afb4fc","sha512":"e9ae2d73ae71a4c0f343a505cc09ab772c6f8c51cfdd3fada94e4a75a10da84412ff7dac616677ca0348698f1b40e0deef27327e6875ebff4757e24fb3ee9d31","ssdeep":"","tlshash":"06c02b22d8004c0f79509fd1cb8af1c4c043dd3ce8215d10b873b154e9ac131c012548","first_seen":"2024-12-16T05:11:29.836626Z","last_seen":"2026-05-04T09:50:27.582674Z","times_seen":13,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/favicon-1.ico","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /favicon-1.ico HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oc34uIkhNNxv%2ByT4BaQ3kjryo%2FgXKc6y%2Fwi7uEux7v89Ssxx%2BfDi%2BGiMuJycurasLRXzi9X3wUOprR1GqsDUSMuLU%2FTkrMCcSzoE%2FQJ4rhcNLaM%3D\"}]}\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699a0d8d-3c2e\"\r\ncf-ray: 9d711f21ec2851e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ddf1d849749e3b203dd956521ad7b368","sha1":"8a7dd93aece5f9c324a74e55eaf770e701a1787d","sha256":"98addbc71d6d29dd039f3f5b286d1d0e2db298ef8a30e29587e8078712f5957e","sha512":"fafcca6095ab692037aa4e56931b217b31b4dad52da1ad12a435bcaf1565072426c828dfc5c11a61d8e2b3d2d0c736da1b26ba104b474e9af9201488747adbb0","ssdeep":"192:moc3wN2MGhHQ1ge+ej9/Qa3CjMyQkowSRUcQPadxy3:O3wuDE/QaE8pRUzAy3","tlshash":"61628721710815a6d02c2b30c376ae3d4a2aae46f52a954ff8c2f1575e33e13f137a1d","first_seen":"2026-02-27T05:50:58.71321Z","last_seen":"2026-03-04T20:09:05.420572Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/59a3c36375c33dd1ca6ac73d12a2395963d6b21d.svg","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:31.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /59a3c36375c33dd1ca6ac73d12a2395963d6b21d.svg HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/7791eec01534570a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDAfPoj1E7ynFPVy%2F8T5fvBmQuqpfv7IqyFT39f4qmfRY2C2swxxsj6AL8gV4gKmqZPghmODrzhGigXqp5NEXaQHTWRzvAqQLdXBNet%2BmgaK3Tk%3D\"}]}\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699a0d8d-15f\"\r\ncf-ray: 9d711f1d5b8251e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6061a44ea0a952321c0232d84896cb3","sha1":"59a3c36375c33dd1ca6ac73d12a2395963d6b21d","sha256":"b54c17a68145cd16d5c6a8cbfae6ad0f17dcd590f3111c9dc1f46101ee8099e9","sha512":"5b2dad14edae62003b59b69e967642a6469602887d9e093a0ae49d13e7e3c8c0861967d51c65365094b240cd822cbdf94c245b1d42a0c3d3dda2e935c35e0b76","ssdeep":"","tlshash":"b4e0c6b684e2082eaa0e8042e0d4cc28e21be40403080cc5a2bd923291820c0ed462fc","first_seen":"2026-03-04T13:10:35.665303Z","last_seen":"2026-03-04T20:09:05.429665Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/48e0d3ef989a1d9a.css","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://votes-dreamcash.xyz/index_2.html","date":"2026-03-04T13:10:31.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /48e0d3ef989a1d9a.css HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"699a0d8d-19a2f\"\r\ncontent-encoding: gzip\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SUqqPNgvKiyxVL4mFSYA%2BE%2BcfWu1RhCDnMpsWepAclU3pj5kh3ttpEq5Jvhb4dJpcUHWip8MRDzzrGzpx6%2F1nHCwAVusYbifJ4Nsyh7WZXP05c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711f1e1b8e51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"cb7c2daf4a13f5237d0de693b62e91ba","sha1":"2180230f5428c19355288ca39e17730595a142b5","sha256":"4838f7859a995e168dc7fafe15eab78f2f05a0c930fb6f16ae0de4b0c99573df","sha512":"099855c1ba191d0a6ccdfdb70707c9a2cd3af8d22129506da0bef98650cb281cf9ee89beacf2748e38ef24a123f6901557392f3d12d8f42655306b8b0fa2df3c","ssdeep":"3072:MGQhfVRrBCmT2WTHsQ2wytybjrSWxDhbvgV0:MGQhfVRrEmaztybjrSWxDhbvgV0","tlshash":"f3a3711df652113f3c2780f9d25cedada116b1c0ee3a6be6be4221108ac67e35de7254","first_seen":"2026-02-22T19:36:10.071967Z","last_seen":"2026-03-04T20:09:05.436456Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}