{"report_id":"9d9cba88-145f-4e27-9dec-2675317cda25","version":0,"status":"done","tags":[],"date":"2026-07-28T16:15:03Z","url":{"schema":"http","addr":"zebec-vote.xyz","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"title":"Zebec Network | Real‑Time Crypto Payroll \u0026 Payments","dom":{"size":84546,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11502)","md5":"6dfb520145e8a3a856d22e479757b766","sha1":"c8f270b367802997a001fed1ebd83dda7f8a9ed3","sha256":"98ad0c5cf4bf2d6c21c0524d1c232b7f746762a903ec23bb4915be28027705f5","sha512":"d5ed33bbdf42634a6be7f89d80db73c4250145a34cca89c186fa603d4f7657bbe42e8ef36089544c4e8ab42e505262de779c62ae4ce5a2a04f1e902bb38b6598","ssdeep":"768:QhGtR8b4wwBZU+p6l9S9WbEhN7VSdViDQot:FM4wN06jaSQDSdVin","tlshash":"2983d671e6f1003305838199aaa5bb6e7f91e90bca4788c9b6bd07c5af83dd2dd4351c","dom_hash":"domhasha7a7e00c41814f546a86c0d3982a3552","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zebec-vote.xyz","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:15:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"ipapi.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-07-24T11:49:58.096449Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":647,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-02-09T00:40:28.837358Z","last_seen":"2026-07-26T12:55:36.968893Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.reown.com","ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-07-22T17:42:24.986078Z","alert_count":0,"request_count":7,"received_data":338115,"sent_data":3766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-07-24T11:50:00.709064Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1252,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"meow-rpc-mainnet.com","ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-06-12T09:25:41.610108Z","last_seen":"2026-07-26T22:49:38.168946Z","alert_count":6,"request_count":2,"received_data":1986,"sent_data":1259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-07-23T13:25:17.67264Z","alert_count":0,"request_count":6,"received_data":6528,"sent_data":3516,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-07-26T02:35:00.129506Z","alert_count":0,"request_count":1,"received_data":337,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-23T01:48:17.214866Z","alert_count":1,"request_count":1,"received_data":2493,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zebec-vote.xyz","ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-07-28T16:11:57.832347Z","last_seen":"2026-07-28T16:11:57.832348Z","alert_count":38,"request_count":19,"received_data":2235096,"sent_data":9650,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-07-27T23:37:21.950694Z","alert_count":0,"request_count":1,"received_data":3256,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-07-24T11:49:58.881436Z","alert_count":0,"request_count":1,"received_data":674,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-07-24T11:49:58.010208Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-07-26T02:35:00.635862Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":7,"received_data":61101,"sent_data":4033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-07-24T11:49:57.873316Z","alert_count":6,"request_count":3,"received_data":4320833,"sent_data":1420,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-26T23:00:42.445991Z","alert_count":0,"request_count":2,"received_data":587858,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"data-image-svg-b.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-07-28T16:11:57.82078Z","last_seen":"2026-07-28T16:11:57.82078Z","alert_count":0,"request_count":20,"received_data":3660598,"sent_data":9952,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-07-28T17:15:58.317917Z","times_seen":2165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/w3m-modal-51635e2a.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2801af71651d3222599c60339080e52c","sha1":"0fbfdc1cd67ed8dc4b19036abac9cc068a8a1b75","sha256":"4df6ed2cf5c706e60579fb222fb0b8439163b1ef0250fbb99ec7873ebee365b9","sha512":"b70d86a57601b818247932ae331e374ed19f13df2728ffc4e01305492fd8300fcb3fe68e02deac03bd53afc9aea1d7e71aeffd74ffed9aab6f5d5f627e146adb","ssdeep":"768:MqoBQVGBRNASaaZBRxjocULoOBRkaKhnYurchruBR+zqkx4IBN79KBPKGTCoSkhH:w0G/lf6oO4nYurchru47iIQgGTCoSkhH","tlshash":"d41309487ab724692543d19c5eeb4a10d330a00b942eccfebbec56d54fd968879be331","size":45376,"data":"","first_seen":"2026-07-09T22:10:07.076277Z","last_seen":"2026-07-28T16:15:18.538719Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-7f66dcb1.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f78df1add79b2e2945f630d9fdefde1e","sha1":"d3bf73b457c30f12090a1846c3334491f2bcf934","sha256":"1c318dde583524906cf2cdce691b0d3928a70bb62ac02657c4a71b6dba2da23c","sha512":"ba948679615eb0334e9d88179d6e7e0a6d0e9a0bd7145e182a893446adf5ed59cffd26e0630907fecf6eaab2caa6302e5078b7f1a4a0a0e16885af3d2550a1aa","ssdeep":"96:1Ps7o9KKKPhXLcK/RWbAoIlWY2vPUlCrwBdgEThTJ/U55Veg:1Ps7o9KK8ZMY2vchaC5c7eg","tlshash":"70a143d22dba26293951d099ae6b8901e321c007d21ddebdbddca1fccf59583147e722","size":4648,"data":"","first_seen":"2026-07-09T22:10:07.096931Z","last_seen":"2026-07-28T16:15:18.534486Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-d22e46c9.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9784485aaeb3fe0fd18d67e9b5a793eb","sha1":"1653f1c96b4a0ff1776cf9e74984f9df2a784881","sha256":"4a5620922c6dba26ca04b97459cade09b01a41cae32659987352f9da9b595287","sha512":"12831d209853ccbd36602cf427339a593e3361ef8cab1f3f31823f48d323582ff734b04dbfaa19ac77e0ecdb604d6d06e7923566976812babc483267fa749169","ssdeep":"48:AgZ9buEQM7ooRKhJwi7QSDzP6lgar+KK3/oZzEPuP:AIgEQM0o8hJwisSPkgaDIQf","tlshash":"7b8116c57fa825a53713c060aa9e4c15f331a023a8199f6e7a9db0f88f55a43781d373","size":4099,"data":"","first_seen":"2026-07-09T22:10:06.981092Z","last_seen":"2026-07-28T16:15:18.552601Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7f350142e1289a8fe2fc384dcd0d571","sha1":"70a3681bfca410b54b6b23abb6925dd133d0a6fa","sha256":"e5e9a684da230d3e6115747559f38fdb75ad4cf1e7b99d73467836d93620fd65","sha512":"32a2762d4d2547a75986de441a84ef9f928e31a0a56b82e101cba7bdc4fe2e7790ae6f2b7686f511a2ca0567d5ff238833d1e3b3593d9968843de0c2aca5ff81","ssdeep":"","tlshash":"38c0c02082f0c9f0803c24c7007d215520703c7d002360c6d2aa8dc7584cfc8060cd10","size":181,"data":"","first_seen":"2026-06-12T10:46:19.540179Z","last_seen":"2026-07-28T16:15:18.565332Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-511fa38d.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d76f3e4600e3a0b1750989a69955eb7","sha1":"73c7d3fc9e66d448e52dc4e14241ab5467fca247","sha256":"53e0830659e8b53e12eb49cac67aa42da0fbe19c1a74f44f3c1f509652c76115","sha512":"daf613cfaa279bd208802d1fab11b0972de0dad83b84dd9647663b5188997a0a16f64788652655f0a789519a9fbfb0af40ea3088aeb95154738ce5aba7f0b6b5","ssdeep":"49152:zFehIJfspItXVTFeSeiZiELxpff7CyQPxF4XB49MeE8arxvtBydjKHisrOAjA9yf:8KtdpfmyaL4XB49mrKq","tlshash":"06d55ca0725964ac4fa355d4446f2002f234ac93608dc099f79ceaf76fe58c589bbb3d","size":2874070,"data":"","first_seen":"2026-07-09T22:10:07.112862Z","last_seen":"2026-07-28T16:15:18.56647Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/receive-ba048af1.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"22baef097fbc936a24879952b84f7c9e","sha1":"707c37c225a773e76bf50f1ec2de8c5e1cd0ae01","sha256":"4fbf8bb8dac342e66abd3a4dc18206ec46c19a3ef2f598abcdb40be4736330b4","sha512":"0c95dbae4a7c3cbd4d408a27e6dc6d3584c5a4ca6d311c0a609490267762a681999a2dc1d81582da611a9c1e0d541a5955629108046fd6d4fd254a6460909c05","ssdeep":"192:WsH9KKjVyeIWuIevxqeOlFhlmpqWF+yNX:WxzvIGDOlblmpqWF+yNX","tlshash":"b1d1c64559f6389db903e05c1aab9a00c131100b852dc5fdfafc93e5cfe9a4689ef722","size":6653,"data":"","first_seen":"2026-07-09T22:10:07.02384Z","last_seen":"2026-07-28T16:15:18.543906Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/waitForCallsStatus-50930dc7.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f86836ce504fd46e628e880020754cd","sha1":"f36e6933809fd6bcad627edfc014b32357180d2c","sha256":"529860e5f146953aba1741485cb1210176423e3954b2d3be22c85766d44017c1","sha512":"c6bcddd0ef9e1909b6e1c4fe6de32bfda17a574e7e2f46d72a1847103656766c96d3bc01e82ff9255970bc64db8dcc0c0979c1f3af207918d5b2212121274620","ssdeep":"768:MPFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:MP3mopEwBE+k8wVlUo","tlshash":"3013f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18c6e7e39","size":41670,"data":"","first_seen":"2026-07-09T22:10:07.019023Z","last_seen":"2026-07-28T16:15:18.525092Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/Url2CfvkS4yP.js","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-28T16:15:18.545416Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-07-28T16:15:18.567293Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-28T16:15:18.531965Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-6q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c08d24be6634008dabb37542b7c8cebe","sha1":"a9fafcaca3593280a089aeff6d97ad1ae297021d","sha256":"535e0d887c1743e29a90961918e951a76526a21fc051bde376071c87e9cd052a","sha512":"70e7a8c0480e3d8736f7ad4671ad6d8a5e123f4f526901a816d143700ed9d418db3339b3c71aa57b3bb58773ce199dff5281055d63129357653d35beaeb6c145","ssdeep":"6144:dslfTKpqf39kdU36jL6+BuM6mLHJNwGxGAVU:OdTwqf39kdU3OptVU","tlshash":"78c4e385088670c7fe6e996d8e688dfed1b247253ac3e153ddc1f586bb18e21d8e0b05","size":545309,"data":"","first_seen":"2026-07-28T16:12:16.970862Z","last_seen":"2026-07-28T16:15:18.5082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3731bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f79dcfc1781a80fd7938c049071b68ad","sha1":"304e8abd667e174b3e915068f69d1e3676a286f6","sha256":"f7e8cb2e47e354b88e8c7b7085e0602d7b19a89bc5e280214d057dd668a1b48b","sha512":"517744ac700284eaef7680a9da77fd52a6b66c953ed03344f81d11c51266732ef0a16515a01f9ade5e06ae4dad287ab5833ba601f6a517ea58f1ffe60d14efac","ssdeep":"12288:krlE8m3Ths10tkwUaTDWw5WS1Goo0eGZOeHE+eCcbLfc1D3dKbpbeeaK2Au:khpm31uF3EYfoK+eCcb7c1jdKbxvEAu","tlshash":"f6b5109713c5582ec0d7a66fcc71bc5df0f59a324e791986ad13908bea6e78046f83c8","size":2452572,"data":"","first_seen":"2026-07-24T11:50:11.02626Z","last_seen":"2026-07-28T16:15:18.56838Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-9a032842.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b786cdbeaeac89e68f8d1668cc9e88f","sha1":"32c135609f6287e47fc3410606209e81c65ff07b","sha256":"e93e5fcc877a054783478ff8538e0c3e00dd0a9ef9fcb34b4ec30ffc2c3abd3a","sha512":"53723952bdd80a5ee95e06b5527a809f74ead097d636b0944186973aec357d72481700666e6aa4e2909cc8ee3fdf66fb2d5c3484cdbde9c88dc4a72dd30db7f4","ssdeep":"3072:6af28caO6wounrtsfQyfy071/U7N95IpHV/wxMDP2zj0ZoaIsez4xXEmKu6fM:N2cknpsfQya071/U7N92pHexMDP2dPsZ","tlshash":"6af36dd5325ab57583da15c8201b1201d23858a8b80dd0b4b6accde6bdefe4896f7f3d","size":168881,"data":"","first_seen":"2026-07-09T22:10:07.095065Z","last_seen":"2026-07-28T16:15:18.537026Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","size":15357,"data":"","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-07-28T16:15:18.542206Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/Ih1ipmWZlfjP.js","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e3a958730042fae764f725b23b52b36","sha1":"ac83a846fd02e073e989847486858293a4707d3c","sha256":"e8cc9a88159f678c56151658d6d6790c9de8631df68e7d6e73b79a7f19c6f040","sha512":"46c60c92c86fde9fb220fdc19b58a67b4c5e6aa500b4afc05c9b2e2781673cc8f67ea0ef4b9cc5c27413e6aac48af69315aa2366eb6d2a29da2828cf6eea2831","ssdeep":"768:0o//9nZD8RUR2xOVAEZ83idtOEpytAq+2Bkz+wpB:v9oUYxOXEitpyt/DF4","tlshash":"bae2c78d7be53132422361780ebb16447536e8435544d4287aace3903fe4b3e65bbbf9","size":34188,"data":"","first_seen":"2026-07-21T08:22:54.036409Z","last_seen":"2026-07-28T17:59:32.829201Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"52b67e899609ef76feb9b304908f6e86","sha1":"3a91454ec2db719727e8eb84597a695a37c0e6de","sha256":"d92d53155cd441321ddc818c6c335ded0da3af6a3894e9c7ea46ad6cdf232308","sha512":"cd41c7228a4c353c74a52afc0b0cb7161432ae4f8fd6aaf1f61de350fe630b94f76cc16757607950b2a07c4c03a865ea5b1f6970daa4ab9d0ef2b29635f312ae","ssdeep":"6144:VRMvk59jx48/taojdhOV3E9B3snP9BqWdw7wFBSzWb3ckXQF/91uqjk2:V2M/l48wIrjByzGy83","tlshash":"1c35a1e78799dd3f885e85298e3c6d9c40b62c73096da19ef453b258c4fc2524bc7b88","size":1150545,"data":"","first_seen":"2026-06-02T08:49:54.164781Z","last_seen":"2026-07-28T16:15:18.569274Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","size":5617,"data":"","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-07-28T16:15:18.555138Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/hashTypedData-6bbf20f4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8525ec0e30cb8ad90f23b4d7667438fb","sha1":"cff460b1940ff24361dc888d3553c817bd24c3ca","sha256":"70d3c8c529dd0283b9e588287f5a0f18588a471bec5a552026f662df63d4003c","sha512":"adf2c5719664b6c49eda7b06f59c1cee0ce85f079bc4eb54d691100c08ee4257e0c4872889eaa6b8a81e8bb935e87d1070713617d1b3d827653afe2637e3d827","ssdeep":"96:sBb/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sl/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"a991128c71a5f5b42ecd09e8e0e72101e6e4ac11f47488e3f1ec65f325a296da57a72c","size":4290,"data":"","first_seen":"2026-07-09T22:10:07.104374Z","last_seen":"2026-07-28T16:15:18.550877Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/parseSignature-636aa378.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"12d3f7b322228366c870da5d4eba33a1","sha1":"0c64599666d8621c4fc574c282dd7a4a95b8fc98","sha256":"f2c3d436ba59839208ab83da55c92b47a6ca1b537eca728225b17a44c7981ea7","sha512":"67c4645b4324a73489b8426fc9ffe8d38af62816d84483f1eeb2a1c76a99d95fbc078064c749a6c4a65e0d65c5b71ca1e4a00759ccd9bc873b090d5d8b623ecc","ssdeep":"768:+JvPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+3NEogBL4G10Pu+hcnXb11a","tlshash":"09f22b88b5b9b07193546894d05b6202a228fdd9f40e80d1f36ecd7b2ff944cd9e5a3e","size":36106,"data":"","first_seen":"2026-07-09T22:10:07.026029Z","last_seen":"2026-07-28T16:15:18.558516Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/WebCryptoP256-30d9af46.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"919de8000fb179a9e65809362b8b8c57","sha1":"fd8061b623bcba4f7a2b226e2e12bed6df451a77","sha256":"4c2fc69edd92f2477755fe8fcbc24ae4e8f79338cea6e7dff1d6448aabcec315","sha512":"91726a7f785dbcbe8a18470fcfd39b857332daf19cc93e8932a1f24154629ce165be285f60b3b6e3db3261d6f9117c785243f9cbc2166ab944ed45d60a32fac5","ssdeep":"3072:D+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:Xpf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"06a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","size":101110,"data":"","first_seen":"2026-07-09T22:10:07.092122Z","last_seen":"2026-07-28T16:15:18.551756Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-b562c69d.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ff3d73f35b15d96b6288037482c75bcd","sha1":"93c679b46cd8bd121316e20e20782bff410d1fa0","sha256":"2addd997e4f458aae0dd3fe90c839ae42a465e4132c7bd06ab0a9bd2ac8c40e4","sha512":"18db0615e46eb6e221d4cf8a0deaa853a831704463b32305c58b547fb56239528d58a93c8e722d2eb4123771447bb09f8acafd3e4d02c7ced19604b458a987fb","ssdeep":"","tlshash":"e4117ade143da278e1a221085768e65907fcc96fd5fb35fb40629ba1f1e0dc090a80de","size":1025,"data":"","first_seen":"2026-07-09T22:10:07.075337Z","last_seen":"2026-07-28T16:15:18.52843Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"c38854c7e359e35789fe98b3fc4e9044","sha1":"04e010d96c7f87a4fd058859d6ddc42921877f33","sha256":"cdbaa47aeac29158c3c61a13dd324081d71e233d47d1b9c6d0a19bf413a383c4","sha512":"ca510a3c5d782d004740db44c858108668f077f9d512485adc16beb01a4640f90a8bd8ffa79abc33f2d49690192646b948082432a3d443528a8ca14adae74b4a","ssdeep":"6144:ykHbKOKpqf39k9U3kvDqQv8QA01n5NEI9SiVs:H7rwqf39k9U3eTRVs","tlshash":"3db4b984048a70c7ee5e196ecf60d9eed1b1172623c7e0579dc5b20a7bacd02d9e4f89","size":507849,"data":"","first_seen":"2026-07-28T16:12:16.996322Z","last_seen":"2026-07-28T16:15:18.57017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-28T16:15:18.520015Z","times_seen":450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-0b64b1a4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b16a811668ed723475af5d403b28cea","sha1":"3038ace8fa2a3dd39be4f3937c2b5e61a93d27b5","sha256":"1b83a9204afc2342fd998aa1799e699dcccfdf13d7a8f67edc77eb4f37186c00","sha512":"e8109c8af20de029811fdcca140349a5d5a08411a887ec0a6422a58da49ab6eb34235605ad99cc58d89f2c7100e047b27e08a036d6df82e8a2a66e4e22738fdc","ssdeep":"6144:CvIqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:OIa4qDDNBcCbGc","tlshash":"ba346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","size":239581,"data":"","first_seen":"2026-07-09T22:10:07.016267Z","last_seen":"2026-07-28T16:15:18.523497Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/send-bb23cecc.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bb6134ab8668105bd6b354bf395e69f","sha1":"fde54db9036e967ef1f9a39ef23f86c7f17001df","sha256":"a4945bcef122e828a6bd3ea350424a8c3c5d81624702d31e086362bca68d14b5","sha512":"ac764a071be886c56b849d01b45c74e13711ecf9b7e13d94bc6b8dc4f3647db552ccc2b152a8713d204e67af5b8452d4d3fcb0b0d4ee8b055b37dedc9472a13e","ssdeep":"768:HaYsioM0DBzIaErALdwmBwfZmTLsRCjeHu+DJd4XwMPzGiY623a7vl6CcT16I8:6YsN9zIaEUXqt4XzPzGB5K7N6CcZ58","tlshash":"73e2c69033fa281d2aa791ad99e65e0053215017c11cc5fefaece2f18fa9e4248f7770","size":33555,"data":"","first_seen":"2026-07-09T22:10:07.023006Z","last_seen":"2026-07-28T16:15:18.548021Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/SwapController-2e16b6f2.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c77fb655311df29aaac9a646cd45743","sha1":"06ca5136e975b3b97ef6fd51172dc063221c36ae","sha256":"76a2bf277b519f749984dbe72f018ece0ffb3509450e3179377c1b75f95f1b25","sha512":"a58a249a2b5b83b2fc5973bd6f73bfd1f559bd4b8d326b2e415629ea81144370cadee866fda7bf752dae75a195e8fa724bff93a1b7484f52645989887172b8e8","ssdeep":"384:3tEUnUFX5mq2YlqWfVgGVd9MYpah3KXMiyV27m1OyT3On:9JnUFJmqjtfVgGV4Oq8pE27m1OyT3O","tlshash":"8d628466b3617172b31db588a6f6032011163cd4d86ef4e8f4ae16e30bf159f1adb931","size":14699,"data":"","first_seen":"2026-07-09T22:10:06.994283Z","last_seen":"2026-07-28T16:15:18.563725Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/secp256k1-faaf71c2.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"00b2a1553079b769cdb0f1c740a2294d","sha1":"b9acc92c0c398a2d5140ca28ad8d05a48ec1b9f8","sha256":"b8f52f01c9989fd40b6bcdfb10c4e2bb1e2205350d7f6b0af970bb4f2bdcc454","sha512":"c451dbb1e06003f5809e91d558f2823194984e4713b96c9eeced451b7f21091b9164dd6a19a9ff99042a3dc1e2b9b82b4fe5d977b58865ff73294dafcc1c97fb","ssdeep":"768:s+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Tl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"1af2e84422d1747293fa28d005725102f675ec64b1cf8c90e59c8dbb3ef74a98ab6e3d","size":35157,"data":"","first_seen":"2026-07-09T22:10:07.038592Z","last_seen":"2026-07-28T16:15:18.556055Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-25e89062.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"211467039f78c96c9e544fdf2cf7ffb4","sha1":"1cd4fa45f4110f1aa58dfdb9bc9b89bcd041432c","sha256":"6953ae0065c467f8d8e0af58c88fdcefa55e7ef173022741ea84efeaa36d4d43","sha512":"e993e082a1138b7b009cebeade7b8b8a9f8e01981087761a3345a59016d2160a35fd03c59b57d691ada2cab1eaa2518bf152d42150cea709786e3b8e84fac60d","ssdeep":"","tlshash":"3981b4857335e911251a896467fb8206373a50274511c0ecb7cedaf44fbfe459b71b70","size":4064,"data":"","first_seen":"2026-07-09T22:10:07.011171Z","last_seen":"2026-07-28T16:15:18.510392Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"340d91dcf13b076921b75300ec47f83a","sha1":"c890f2491c91c557a44ba929c67e08b5944d53ba","sha256":"4463ac697265105c186e84801bbd5bad264f59470d34ff3ec348367d6f2e6f67","sha512":"bf78f6567574d468f2e4255befb3eda23d84676cae1c3da368fbd8763c723eac5e8bbb01f772db90a140a95ae88fde992ebf4105575fe08502e64aedc780658a","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGPQXp91gGT8b:QQqJr/0SVwZmzHCP2aIW","tlshash":"ff55b0e70ac1c92da4afd921ce3c0c7c40f656622d79218be553e9dae6cc3754f8ab44","size":1320082,"data":"","first_seen":"2026-06-02T08:49:54.163198Z","last_seen":"2026-07-28T16:15:18.571879Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"5b6cdc5c9a756bff220403be92628956","sha1":"9c3cf49cdc63f771421e5ddc7127005e152c5b6e","sha256":"8dee0e73f55577a6e7b67f2edf9ce1a49fc2eb93412d6199f4dde9eefca3743a","sha512":"52211e6808ced083a7d7eef80e870c3bb86b45b22f939d298fc319927f175d30e0693fcb88e9e9d262b234baccab8f8a5b85b5a4bae6064ae8a05afff8f94fec","ssdeep":"12288:dFlkukzR1mZ0tkwUazDiwfiS1aoo0e0rS2/++ey4X/f01D3dMN5LeK4a2Av:d/5kzzYF3AK7om+ey4Xn01jdMNlrSAv","tlshash":"b5b5ffa723da1d6ec893122f8c71bc5df4f61c32566d988eb917314ae93e68157f0388","size":2329508,"data":"","first_seen":"2026-07-24T11:50:11.028929Z","last_seen":"2026-07-28T16:15:18.572933Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/compat-c27ef8e4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"845a0b2cba7b980364baae55a97ddcf7","sha1":"ea45b7651b1d6d0179ec65b15201e7a53a0dd842","sha256":"01b7599fecc3e60bc938205b0e726b9cefa078c07d0dd8751da4392ae4e63d31","sha512":"edbbf94740ffa23f31234104aa40d8874e36a5b1eb80ecbda3c110998b0dc2258b4b75ea43973dcb0da14c90f807df6d64805f30e60ae44d242008fc6b8466fe","ssdeep":"","tlshash":"0e71e9d96b7ae5b2d2da63e0402e231163357f613d1ac871a23cf8d02d296408d72fc7","size":3740,"data":"","first_seen":"2026-07-09T22:10:07.068713Z","last_seen":"2026-07-28T16:15:18.537918Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/localBatchGatewayRequest-d1999229.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d88eeffb214c5d2b6f3dc73f85541df","sha1":"0b22de7fe208c93d95c2eaceebde9def561aff29","sha256":"dbd244922a1351aa4764b5cb8eaf6f8a7a86ecb24bd9e58ff897c7748fb50c97","sha512":"23e8b40a51e06048ab451d727a21068e917e3f5c446395077a03506fff9d4954008c791dd5432e53d3a3e3f1f942de2dd6d86a33b7bb546dd5118d705d4b3f88","ssdeep":"","tlshash":"cb3151c8b609aa32e4af2932640fe55494312945a82d80b1d94f35f79f315c5aaafd1c","size":1781,"data":"","first_seen":"2026-07-09T22:10:07.058194Z","last_seen":"2026-07-28T16:15:18.562802Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.1","filename":"https://fonts-css2-sans.b-cdn.net/index-3731bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2206569},{"level":"error","text":"Failed to notify visit:NetworkError when attempting to fetch resource.","filename":"https://zebec-vote.xyz/Ih1ipmWZlfjP.js","line_number":183,"column_number":6826}]},"http":[{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.947Z","timestamp":1785255236947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: a2252c8f0c17c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":52286,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-07-28T16:15:18.499124Z","times_seen":669,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:14:06.788Z","timestamp":1785255246788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1950\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 \r\ndate: Tue, 28 Jul 2026 16:14:06 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a2252ccc8906b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2816,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":4,"connect":10,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cabc2ffdf047f9422c39eb_zebec_02.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.379Z","timestamp":1785255234379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cabc2ffdf047f9422c39eb_zebec_02.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 44808\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"af08-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44808,"size_decoded":45029,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"928e36dc4d46056bfd5dc8316412efbb","sha1":"4cdac3f889bcd0270ac05978ee04c65a2b7f5e97","sha256":"c85318068fed7c6897ac832c397ccae1a71c6be907eb6ad4de64fab11309f802","sha512":"d47ae05b755f3ff049cc8928a9fc767f58facc3d3ffc6ea7c9f49137a0e995a03abfcc249baa38616dbd4b620e33c48d3786c21fb686f0741d76b1dd77cda1d6","ssdeep":"768:jTRpzXVai02qFZl4FPGIWK8uFptcUogB3gRwxx6VSWXqpRjg9gr0nUpd5q:JJx02U2FSojp3PGSWXqzg9gr0V","tlshash":"fe13f2c831519f0acc2bc5f82a1694d84aff17ad244d1b333a27d5b21e8781878ae7f4","first_seen":"2026-02-23T06:27:15.829639Z","last_seen":"2026-07-28T16:15:18.500987Z","times_seen":36,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.945Z","timestamp":1785255236945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: a2252c8f0c21c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":60855,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-07-28T16:15:18.502195Z","times_seen":667,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/zebec-network.webflow.shared.6c378a307.css","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.811Z","timestamp":1785255233811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /zebec-network.webflow.shared.6c378a307.css HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 32827\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"40a1e-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264734,"size_decoded":33125,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (554)","md5":"41b051e92c72c451f64b808733e75c2f","sha1":"5bab0451fa37494efb8d4ae0b9726cb7a87c6f19","sha256":"7b1374e8b052798af2df9b22e7b27fc09d7a1ccd527b666149026d8f0f6b3153","sha512":"2d5b5165830efb3204b97efac352de98c8a722704d07f2c76ecbfda907e42e290a8aa3b0731c661a7574291f2185e1c7d96892647d6d84418575e5ceebcb8b3d","ssdeep":"3072:pP0XcPye+kimuPNdM8yAHY2Q84jtDZe3bbNzJxqljWbmkI52J/P:pP4cPyfkimuVdM+8Ze3bdJgljU","tlshash":"5f4467087bb56514745fd8bcd9d9abc0732d8042ce0ddea97ae26059cf883c93972b9c","first_seen":"2026-03-13T01:58:24.910057Z","last_seen":"2026-07-28T16:15:18.503462Z","times_seen":32,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68db9a4f879da60545513749_zebec_45.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.829Z","timestamp":1785255233829,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68db9a4f879da60545513749_zebec_45.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 29096\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"71a8-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29096,"size_decoded":29317,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89b73bbae86c4a8a726ca7703f461cc","sha1":"798ee1e24a15655a7f12cb8f9d0209d9e7c2c0fe","sha256":"a062d6e7ee0cca72980003d756d1e53774ca72e48c87599c9911c18f97acbbae","sha512":"d152add4c2dd30970d125ad05ab39105e0f65eef2644efb149acee9b90fb138817d29a5acdce33a8792a1eefa448a8ef1f49b70bb0fb48ce419bb33a16701e64","ssdeep":"768:bTLIwZ9rEUuVlotUAfshCsOv3xwgUb12Ks0ztVq:smrpuV+xlA12gq","tlshash":"08d2e10b1f286a44e27321b2e0b81a0becc6ff53256bf756491cda1d6a8f146950cee4","first_seen":"2026-02-23T06:27:15.821754Z","last_seen":"2026-07-28T16:15:18.506178Z","times_seen":36,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":35,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.358Z","timestamp":1785255234358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:15:02 GMT\r\nexpires: Thu, 22 Jul 2027 13:15:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nage: 529132\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48444,"size_decoded":49257,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-07-28T17:12:34.915557Z","times_seen":23501,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.541Z","timestamp":1785255234541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zebec-vote.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7U/jXrLtIsVM19LO3iDg/g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: sODdVp95i/IOKzUgXZW0OimVqkg=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":102,"connect":120,"send":0,"wait":24,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-6q3nqqoukwf.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:55.097Z","timestamp":1785255235097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-6q3nqqoukwf.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:55 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67e24d-8521d\"\r\nlast-modified: Mon, 27 Jul 2026 22:57:17 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 05:09:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e9ad3b4c4379969e870bc8ad42b5bc5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":545309,"size_decoded":109939,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c08d24be6634008dabb37542b7c8cebe","sha1":"a9fafcaca3593280a089aeff6d97ad1ae297021d","sha256":"535e0d887c1743e29a90961918e951a76526a21fc051bde376071c87e9cd052a","sha512":"70e7a8c0480e3d8736f7ad4671ad6d8a5e123f4f526901a816d143700ed9d418db3339b3c71aa57b3bb58773ce199dff5281055d63129357653d35beaeb6c145","ssdeep":"6144:dslfTKpqf39kdU36jL6+BuM6mLHJNwGxGAVU:OdTwqf39kdU3OptVU","tlshash":"78c4e385088670c7fe6e996d8e688dfed1b247253ac3e153ddc1f586bb18e21d8e0b05","first_seen":"2026-07-28T16:12:16.970862Z","last_seen":"2026-07-28T16:15:18.5082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":30,"connect":1,"send":0,"wait":14,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.838Z","timestamp":1785255236838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:56 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 16939\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"10e34-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":314,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-25e89062.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.908Z","timestamp":1785255236908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-25e89062.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da72-fe0\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:46 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1075\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 29b0ae1af834d7c9b0ce84a9c6a6ceeb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4064,"size_decoded":2643,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"211467039f78c96c9e544fdf2cf7ffb4","sha1":"1cd4fa45f4110f1aa58dfdb9bc9b89bcd041432c","sha256":"6953ae0065c467f8d8e0af58c88fdcefa55e7ef173022741ea84efeaa36d4d43","sha512":"e993e082a1138b7b009cebeade7b8b8a9f8e01981087761a3345a59016d2160a35fd03c59b57d691ada2cab1eaa2518bf152d42150cea709786e3b8e84fac60d","ssdeep":"","tlshash":"3981b4857335e911251a896467fb8206373a50274511c0ecb7cedaf44fbfe459b71b70","first_seen":"2026-07-09T22:10:07.011171Z","last_seen":"2026-07-28T16:15:18.510392Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.939Z","timestamp":1785255236939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a2252c8f0c11c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":42799,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-07-28T16:15:18.511915Z","times_seen":705,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":14,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.359Z","timestamp":1785255234359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"5b273ad4e3196304514242ec8eae62f2","sha1":"c6c02b6c0117b87e81d7ae81caedc5d64f8eb210","sha256":"73b32aedddbbed4c1a61588ef7566397f7daf592cc2fbd91d9f35f58e606900e","sha512":"1116560d6524c0cf29db24d879c7da0abc588d5fdf2c616071e64cd924fa416c9e7d87c06439a84bba7a4b2ac721314edbfeab5a8cfc18c5fde3abf135efdb14","ssdeep":"","tlshash":"5631a8bfaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a964810339c8","first_seen":"2026-03-13T01:58:24.888155Z","last_seen":"2026-07-28T16:15:18.513671Z","times_seen":32,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":31,"dns":1,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.312Z","timestamp":1785255236312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Client-Transaction-ID: v4U3FNhFYCI1YR9G/R3vTkE822UANd29AR1WmnQMQ3BCf/JdovQXqKzlLWvSuLUvjx5z8MCKQqcA+h+1iB5T0prso2U=\r\nX-HMAC-Signature: 1785255236v=c\r\nX-Nonce: 9s8+pUwFbeiUFZBG\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nReferer: https://zebec-vote.xyz/\r\nContent-Length: 2249\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2249,"data":"{\"jsonrpc\":\"2.0\",\"id\":547,\"method\":\"eth_getBalance\",\"params\":[{\"data\":\"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\",\"from\":\"0xf60caaac388f4806383cb8b613936d0e2411aa54\",\"to\":\"0x1d4944869c7065a09990195abea80c50d7cda51f\"}]}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:13:57 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \"\"\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzEsw5ejGlJ%2BmsUc8YHQxBsoyiwyUwoUsMDUOX4PUehUKKgodPloxhCiX%2FM%2BlqvqHd9xGjNb%2F578nPfOiylulyDDogZ2FPzljMgSoRZRnYKaQOZKAhvHqOJa%2B%2FtPZwZ85WWbthqdzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2252c8e78f4569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":1127,"mime_type":"application/json","magic":"JSON text data","md5":"067ad8317afad939471f32f0cdb0b40b","sha1":"055dfa40c310470bbe011e9ac45a7b851113c569","sha256":"c5c20ee0a64bf7bbc54342e7f82caa79dfd00e2fd506e0e4a2dc7cbeaea4e67e","sha512":"50ba92e58b50f0763e746cf2638a19d4c8098c524e13eba982466cb2fc8bcd20108964d29a08028e554027040172243197efbbf4b1367a2812f437be8207108f","ssdeep":"","tlshash":"a5a0121a1050e581810e07503a4366272005449114c0105269483a0782e7a001b0118c","first_seen":"2026-07-28T16:15:18.51538Z","last_seen":"2026-07-28T16:15:18.51538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/Ih1ipmWZlfjP.js","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.812Z","timestamp":1785255233812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /Ih1ipmWZlfjP.js HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 9932\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"858c-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34188,"size_decoded":10235,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6876)","md5":"8e3a958730042fae764f725b23b52b36","sha1":"ac83a846fd02e073e989847486858293a4707d3c","sha256":"e8cc9a88159f678c56151658d6d6790c9de8631df68e7d6e73b79a7f19c6f040","sha512":"46c60c92c86fde9fb220fdc19b58a67b4c5e6aa500b4afc05c9b2e2781673cc8f67ea0ef4b9cc5c27413e6aac48af69315aa2366eb6d2a29da2828cf6eea2831","ssdeep":"768:0o//9nZD8RUR2xOVAEZ83idtOEpytAq+2Bkz+wpB:v9oUYxOXEitpyt/DF4","tlshash":"bae2c78d7be53132422361780ebb16447536e8435544d4287aace3903fe4b3e65bbbf9","first_seen":"2026-07-21T08:22:54.036409Z","last_seen":"2026-07-28T17:59:32.829201Z","times_seen":35,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":36,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:55.297Z","timestamp":1785255235297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 16:13:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 6503698\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcuVihNb5WcqyOnni5wqNPc7%2Bf3WR7BQx9qsgh55IHvX%2FTOE93a7oeHjvb8UBi6eav2y5tltIqB3lQzI6zNKCiNW%2FlX%2FH6pinTeGz6dnwhK8B26MqZyfjeM9%2FsgrJn%2FnnJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a2252c849ea08be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":24478,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-07-28T16:15:18.520015Z","times_seen":450,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-511fa38d.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:55.889Z","timestamp":1785255235889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-511fa38d.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:55 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da74-2bdad6\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:48 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 804\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 12:07:55\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c561205d7c2f725996537f3be5990357\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2874070,"size_decoded":782091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"7cb6682c48951fe0373f6a0c5ad6a3fb","sha1":"3382e15d0b270023791e1c0720839dcc52a80c2f","sha256":"23bd7e6eeb4056941222c6565f5a380aa04d94e89edbc382a93e08148abbd391","sha512":"aeb64a8dab1d03c5864912962fbdfae30c0926e9a3c15b0ac7cd39bd13471b3673268543cfc6cd61e429b4116826e87b22010ba3fb385b8b3d64e52dc6ea46bc","ssdeep":"24576:zFehIJfspBatzrVTfFeSeiZiK/OlUxpfs87u3yQPxF7:zFehIJfspItXVTFeSeiZiELxpff7CyQf","tlshash":"b4256c9472a5b07507e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-07-09T22:10:07.04667Z","last_seen":"2026-07-28T16:15:18.521724Z","times_seen":50,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":30,"connect":1,"send":0,"wait":6,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-0b64b1a4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.766Z","timestamp":1785255236766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-0b64b1a4.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da72-3a7dd\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:46 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1278\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f42f5b8900b10204016f412988ce1f06\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":80742,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b16a811668ed723475af5d403b28cea","sha1":"3038ace8fa2a3dd39be4f3937c2b5e61a93d27b5","sha256":"1b83a9204afc2342fd998aa1799e699dcccfdf13d7a8f67edc77eb4f37186c00","sha512":"e8109c8af20de029811fdcca140349a5d5a08411a887ec0a6422a58da49ab6eb34235605ad99cc58d89f2c7100e047b27e08a036d6df82e8a2a66e4e22738fdc","ssdeep":"6144:CvIqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:OIa4qDDNBcCbGc","tlshash":"ba346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-07-09T22:10:07.016267Z","last_seen":"2026-07-28T16:15:18.523497Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/waitForCallsStatus-50930dc7.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.774Z","timestamp":1785255236774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/waitForCallsStatus-50930dc7.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67daa4-a2c6\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:36 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1097\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e7934d4e4bd75ace31d96f333b257d0e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41670,"size_decoded":15185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"7f86836ce504fd46e628e880020754cd","sha1":"f36e6933809fd6bcad627edfc014b32357180d2c","sha256":"529860e5f146953aba1741485cb1210176423e3954b2d3be22c85766d44017c1","sha512":"c6bcddd0ef9e1909b6e1c4fe6de32bfda17a574e7e2f46d72a1847103656766c96d3bc01e82ff9255970bc64db8dcc0c0979c1f3af207918d5b2212121274620","ssdeep":"768:MPFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:MP3mopEwBE+k8wVlUo","tlshash":"3013f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18c6e7e39","first_seen":"2026-07-09T22:10:07.019023Z","last_seen":"2026-07-28T16:15:18.525092Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/css.css","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.815Z","timestamp":1785255233815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 662\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"d17-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":956,"mime_type":"text/css","magic":"ASCII text","md5":"cb40bb51b0528aa3732cbf0888af30e3","sha1":"9c0985498628e8cefb9d7b7f3dc9fee85d8cbfc1","sha256":"8aa52f5dbf3b141d73021f6737cde03d4afdfe1a8e9182ec2935d568451fcee9","sha512":"69424893af5b90f95edb67be760f104f3ba4391bd61678a2343eef67d13a4eba10e46f0e4ed1e7f4f6712813f7cea68f4f34363ea75a03a14c505bc5951f0883","ssdeep":"","tlshash":"2b61cc91002bd50066871dd123ce3f39dfce21982082d57aabfe08d9ecead66536a74d","first_seen":"2026-03-13T01:58:24.892399Z","last_seen":"2026-07-28T16:15:18.526539Z","times_seen":32,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":38,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68caaf537569afdf5b2312c1_68cacd9444a30e1d0838e585_wave4-poster-00001.jpg","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.341Z","timestamp":1785255234341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68caaf537569afdf5b2312c1_68cacd9444a30e1d0838e585_wave4-poster-00001.jpg HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: W/\"4ce0-11ef9b4758000\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19680,"size_decoded":14810,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 8633x8640, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 1280x356, components 3","md5":"e1b95e6c3e93eb345ccc802a3df2e9db","sha1":"6f578ab36db8f86891343b659de134b9b910b879","sha256":"1bce0134ea55345d611b72661620aef4267eafab74016255ef635851f3d56af7","sha512":"80a8bab8d8244a7230ade2dbbf602ce7c96f1813388fda148217a413964fcc51ffb9620806c517b637fc98054bf9b6f0085e56144d58bcfc4f1c38d5a2dc47b9","ssdeep":"384:rKim0jVUpcGZm/LQHgIHkgNNuevK4Gg5/LG9g7w:Oi9jxGZm/MggbS4RDYg7w","tlshash":"c59228039d18cbd2a42d86d4be170eed6e132b19e9026efb55014fcf7e205234cda56e","first_seen":"2026-02-23T06:27:15.839077Z","last_seen":"2026-07-28T16:15:18.527483Z","times_seen":36,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-b562c69d.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.914Z","timestamp":1785255236914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b562c69d.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg-b.b-cdn.net/assets/index-511fa38d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da75-401\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:49 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1075\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a8ed36f065d2a551b392763f954f2757\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":1481,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1024)","md5":"ff3d73f35b15d96b6288037482c75bcd","sha1":"93c679b46cd8bd121316e20e20782bff410d1fa0","sha256":"2addd997e4f458aae0dd3fe90c839ae42a465e4132c7bd06ab0a9bd2ac8c40e4","sha512":"18db0615e46eb6e221d4cf8a0deaa853a831704463b32305c58b547fb56239528d58a93c8e722d2eb4123771447bb09f8acafd3e4d02c7ced19604b458a987fb","ssdeep":"","tlshash":"e4117ade143da278e1a221085768e65907fcc96fd5fb35fb40629ba1f1e0dc090a80de","first_seen":"2026-07-09T22:10:07.075337Z","last_seen":"2026-07-28T16:15:18.52843Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.946Z","timestamp":1785255236946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: a2252c8f1c4fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":60495,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-07-28T16:15:18.529322Z","times_seen":668,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":4,"connect":5,"send":0,"wait":10,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/css-1.css","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.817Z","timestamp":1785255233817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /css-1.css HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 739\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"1632-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5682,"size_decoded":1034,"mime_type":"text/css","magic":"ASCII text","md5":"9a0bdc7b91e3374cba8aad4d7ae69bf8","sha1":"7ff3d8360c19f5d36cea3f88d2644ba5900fbc06","sha256":"2112bb00c21cd3e9cd4db705606bb970438b1c8fb1be66e10fa2c891748bf907","sha512":"ffd045c3066f718eadd141f3b0356b04092637ef521e928f05935625b798957b3d6855eca7581781d8196bef88aa3f2d21daf60475b40a05c415a0a0058fb295","ssdeep":"96:aOL2qOL+FZHOLjOL33vOLyOLoJc+uTOLMNDOgnqOgaFZHOgkOg93vOgFOgaJc+uZ:f2Pnm33KXMxMnkIW93tbS+xsq","tlshash":"dcc1bb92002bd50067831cc223ce3f35dece21986086d579abfe1cd9aceadb6536974d","first_seen":"2026-03-13T01:58:24.916577Z","last_seen":"2026-07-28T16:15:18.530241Z","times_seen":32,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":37,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDuYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.365Z","timestamp":1785255234365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDuYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"004d0c2dc54d6e5c592ebba39824d82b","sha1":"2917f9c5a5cedbd99a504982378e9004105e7f32","sha256":"1af23ad04b71a15d638317ec249a312950a8ea3c1dbec5b4658390696956d053","sha512":"2b765ca379a894cf814c24d1edb1656e21457d98647fa3296154774c410b25856d3bb94674eef9578a9356200a67950c153911bbeba3912f1087f8f5e0c0ad09","ssdeep":"","tlshash":"5a31a8bbaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a964810339c8","first_seen":"2026-03-13T01:58:24.890405Z","last_seen":"2026-07-28T16:15:18.531123Z","times_seen":32,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.285Z","timestamp":1785255234285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4701144\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSk%2FB%2BtAA7yxSuB10%2FY5SmELK4Xy07ORaQPLxlIuP5uLX1l%2Fki4A%2FIFChGjw2sV5YwuuxTo06yGYvgu6mSHpgbAcpIzAg8BqoGNffzct1kwoxhJ%2B181Kwemfg5QNOfp%2BpyU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2252c7e6d9da0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522095,"size_decoded":159701,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-28T16:15:18.531965Z","times_seen":457,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":9,"receive":4,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cd9f524d83b2e8ada425e3_zebec_27.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.342Z","timestamp":1785255234342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cd9f524d83b2e8ada425e3_zebec_27.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/zebec-network.webflow.shared.6c378a307.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 16356\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"3fe4-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16356,"size_decoded":16577,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e43ac1a14d7d8602d9323b9f6779b4b","sha1":"56eecee165a35f44fb4b90bc2c0e8f386433ffe7","sha256":"9a21cbb9d5a39e790413158e418064ce15c3772eecb2282cfc0d51edf594f752","sha512":"95e3aefa4b377b1aef76fe8a14817a148341f3358c17a7755711604e125528ed52fd5fe4a12b5a7a9a53f5c2be0e4f434e51448144b6055368a6736a4ba7985c","ssdeep":"384:UwTd30/6uJsK3beLj0SMqq02Oo57R9KrwX/FTBcfOCWQa:RTuJh9/T7NvFGfbWh","tlshash":"2c72d054b3cc8b0fe68983bc54c1918ad1773bb11f7903c4228b64369a675f5bd784ca","first_seen":"2026-02-23T06:27:15.841204Z","last_seen":"2026-07-28T16:15:18.5328Z","times_seen":36,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cdcc9586fe0c90ce83407e_fav.png","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.814Z","timestamp":1785255234814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cdcc9586fe0c90ce83407e_fav.png HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: W/\"499-11ef9b4758000\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1177,"size_decoded":1459,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"39a7dd9ba91f89a74e0a4bfb0d4266dd","sha1":"6e600b7b062e165f1db78e23eb1a320f0094c828","sha256":"ccb54ffc0062abf2075ef020c6bd1b6f83596b825dd52d48791b419b9f0407cc","sha512":"e80f843cfc355d91f8a3e92dfcbef04f186803d386bd9b936f524f88153f97a07f271a88420177a54c41619ad81772212ef087df3a988b455ff50a090d7d02a8","ssdeep":"","tlshash":"9c21b4996e183eb610b704202e339b90955badcd21011a1f7289288a49190e3df4a28b","first_seen":"2026-02-23T06:27:15.851387Z","last_seen":"2026-07-28T16:15:18.533653Z","times_seen":35,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-7f66dcb1.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.910Z","timestamp":1785255236910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-7f66dcb1.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da74-1228\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:48 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1276\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fa2be16e9d56b9c75e588bae3a9e19e6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4648,"size_decoded":2528,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"f78df1add79b2e2945f630d9fdefde1e","sha1":"d3bf73b457c30f12090a1846c3334491f2bcf934","sha256":"1c318dde583524906cf2cdce691b0d3928a70bb62ac02657c4a71b6dba2da23c","sha512":"ba948679615eb0334e9d88179d6e7e0a6d0e9a0bd7145e182a893446adf5ed59cffd26e0630907fecf6eaab2caa6302e5078b7f1a4a0a0e16885af3d2550a1aa","ssdeep":"96:1Ps7o9KKKPhXLcK/RWbAoIlWY2vPUlCrwBdgEThTJ/U55Veg:1Ps7o9KK8ZMY2vchaC5c7eg","tlshash":"70a143d22dba26293951d099ae6b8901e321c007d21ddebdbddca1fccf59583147e722","first_seen":"2026-07-09T22:10:07.096931Z","last_seen":"2026-07-28T16:15:18.534486Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1785255233940","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.953Z","timestamp":1785255233953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /A3sLm15Y.php?s=%2Fipfs%2F7Gc6p9UQ5JqaOMMS_fY_pg0702b396044cd339a8cd438d2bd10030%3Ft%3D1785255233940 HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 277\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277,"size_decoded":452,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"03b4045b7fb0193f673a6bb88692c0f5","sha1":"05eaa2da8a0938651bf18d1e9cf790bd0dde1528","sha256":"172dd4b68f2ae977d2c4b602ec816a52cd279ad1839ff6fdaab9efde53398588","sha512":"6dbeb3f5791f57ba0e7704a430e73e077dba0c727d7d9c38c591b8fdbe5ac7ecb7b3ad6776d41557e7c48ddac50c3bad23728db2351a17522c61688a894e2dc7","ssdeep":"","tlshash":"21d02bde5083a39a4811246039c225c2768d13e6b4ba81e82dc6d487529853ecd9a9cc","first_seen":"2026-07-28T16:12:16.949831Z","last_seen":"2026-07-28T16:15:18.535335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"172.67.179.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.314Z","timestamp":1785255236314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqxIja6FNoGQ%2BPAqGhfRMA3wjQQyIh6i%2FJQbygyRTIS7KCmEI5luu4XrXekDVEwdNfEtTCab77NEwndWUai9Pdy4mSpnjFyEAi9LEWehVBV8WRJ012p40O8DObuz3aBtEL3mvUX1vQ%3D%3D\"}]}\r\ncf-ray: a2252c8b18c8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":879,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":0,"dns":10,"connect":12,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"meow-rpc-mainnet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-9a032842.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.684Z","timestamp":1785255236684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-9a032842.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da75-293b1\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:49 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1099\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 537052aae96e0c3f7cf95dca80b01cdc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":53915,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25980)","md5":"4b786cdbeaeac89e68f8d1668cc9e88f","sha1":"32c135609f6287e47fc3410606209e81c65ff07b","sha256":"e93e5fcc877a054783478ff8538e0c3e00dd0a9ef9fcb34b4ec30ffc2c3abd3a","sha512":"53723952bdd80a5ee95e06b5527a809f74ead097d636b0944186973aec357d72481700666e6aa4e2909cc8ee3fdf66fb2d5c3484cdbde9c88dc4a72dd30db7f4","ssdeep":"3072:6af28caO6wounrtsfQyfy071/U7N95IpHV/wxMDP2zj0ZoaIsez4xXEmKu6fM:N2cknpsfQya071/U7N92pHexMDP2dPsZ","tlshash":"6af36dd5325ab57583da15c8201b1201d23858a8b80dd0b4b6accde6bdefe4896f7f3d","first_seen":"2026-07-09T22:10:07.095065Z","last_seen":"2026-07-28T16:15:18.537026Z","times_seen":9,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/compat-c27ef8e4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.685Z","timestamp":1785255236685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/compat-c27ef8e4.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da69-e9c\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:37 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1075\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dbc3ff9b6b76200256701d6642287fa2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":2681,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3739)","md5":"845a0b2cba7b980364baae55a97ddcf7","sha1":"ea45b7651b1d6d0179ec65b15201e7a53a0dd842","sha256":"01b7599fecc3e60bc938205b0e726b9cefa078c07d0dd8751da4392ae4e63d31","sha512":"edbbf94740ffa23f31234104aa40d8874e36a5b1eb80ecbda3c110998b0dc2258b4b75ea43973dcb0da14c90f807df6d64805f30e60ae44d242008fc6b8466fe","ssdeep":"","tlshash":"0e71e9d96b7ae5b2d2da63e0402e231163357f613d1ac871a23cf8d02d296408d72fc7","first_seen":"2026-07-09T22:10:07.068713Z","last_seen":"2026-07-28T16:15:18.537918Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/w3m-modal-51635e2a.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.915Z","timestamp":1785255236915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/w3m-modal-51635e2a.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67daa3-b140\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:35 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1030\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a95943a4818e4a23d57529a8bf4912c2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":45376,"size_decoded":12612,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3668)","md5":"2801af71651d3222599c60339080e52c","sha1":"0fbfdc1cd67ed8dc4b19036abac9cc068a8a1b75","sha256":"4df6ed2cf5c706e60579fb222fb0b8439163b1ef0250fbb99ec7873ebee365b9","sha512":"b70d86a57601b818247932ae331e374ed19f13df2728ffc4e01305492fd8300fcb3fe68e02deac03bd53afc9aea1d7e71aeffd74ffed9aab6f5d5f627e146adb","ssdeep":"768:MqoBQVGBRNASaaZBRxjocULoOBRkaKhnYurchruBR+zqkx4IBN79KBPKGTCoSkhH:w0G/lf6oO4nYurchru47iIQgGTCoSkhH","tlshash":"d41309487ab724692543d19c5eeb4a10d330a00b942eccfebbec56d54fd968879be331","first_seen":"2026-07-09T22:10:07.076277Z","last_seen":"2026-07-28T16:15:18.538719Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.931Z","timestamp":1785255236931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 4421\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:14:03 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 1086159206939190217\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgnBeEitDCKpcoLiPcnTpnkMP8IkSmY3tvWgObmfRNbG7IV%2FQWMpDGet15TUEspVdpa%2FyxIgEJNjVw4OS9CzwX6MH4AJ7r2wWm%2BVIjgTg8SA%2FAWmvjjRw9h2AzmnzbEz2xmsoPQhzA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=d36cc583-7f7c-46ed-8bbb-bf2d79478321; Path=/; Domain=coinbase.com; Expires=Mon, 28 Jul 2036 16:14:03 GMT; HttpOnly; Secure\n__cf_bm=WUiFofAt9ZNnEeUekY.ceJb5y8jsheOS853mUIn2VEY-1785255243.322395-1.0.1.1-GN4y08zSO0MI0.2TTivHApS4WbRxqTMhP91h5an4gDc2AUEfk8dL234ypRHuzGziFM1_MWOHQNzjdFO4VMSpHeKNxle9wo4UL9zvOV03JKp2gmI9sma5wOJbPWF6dZ2P; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Jul 2026 16:44:03 GMT\r\ncf-ray: a2252cb6cd56dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":1170,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-28T17:15:58.03507Z","times_seen":35941,"resource_available":true,"data":null}},"time_used":6512,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":122,"receive":0,"ssl":6384},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cae204aace7f380505e6a8_zebec_04.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.826Z","timestamp":1785255233826,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cae204aace7f380505e6a8_zebec_04.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 50684\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"c5fc-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50684,"size_decoded":50905,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20d69dfca88d6a090fd6749deb6058ae","sha1":"69708295e28d37eb3306ec98ae30ee65838c87f8","sha256":"f06352f77cb9a5052c2b90d0fa47d4199c21e52ba8aecb2a66fafa0a4521a3ae","sha512":"56c9c73215685fa39ff3e700919b0b325b986bfb1f1c7ee431d2f127f0743e9064b98b3f6769ff6e9ff7e6ae92ff3130d461233002f65ecf16011862f6a21629","ssdeep":"1536:L9QgsBNqn2XGmB0ZkqYwFZb47epZ5x7AurOnT4IyXH/hiko:5QBQn2XVkpliepZ5x7AXTbyXH/hiB","tlshash":"fc33f15fd21031befd409fbc3b2dd7538e58384457bad86810e701b796ca4aac1aa6a1","first_seen":"2026-02-23T06:27:15.812435Z","last_seen":"2026-07-28T16:15:18.540441Z","times_seen":36,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":63,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cae39c3b91575f16d2a3df_zebec_05.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.828Z","timestamp":1785255233828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cae39c3b91575f16d2a3df_zebec_05.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 21570\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"5442-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21570,"size_decoded":21791,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1a27f62b8d6a127ab1422adb7fa2435","sha1":"a403d5343d89de57ff208b7ff276682896ecc9cd","sha256":"771711c794ce5e9858a935d532fcff368b47b2f546922d4f76620e0d67a8e612","sha512":"610125c90969c9f841ad12d0e0a9e2b8700ab3610bc08e99c97c7b3d9ed06f5606e5abee84825ff56dc37ddf42713e2a138ea95def094ea55949f0afc3575d35","ssdeep":"384:GwT0BDr9gDAI6jrnFz2qDnxb11A/MB5wJuPWjJ8t7xaGsWrFwRd+E2lGR6qofDQ:/Tar95Xr1LtLAk56seg7xaGsW+ReGNoM","tlshash":"4da2b0e77f17433bd800a7334483212968735a5182d473261b215ad69d371dc3d3bba7","first_seen":"2026-02-23T06:27:15.84366Z","last_seen":"2026-07-28T16:15:18.541386Z","times_seen":36,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.770Z","timestamp":1785255236770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da70-3bfd\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:44 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1098\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: cea24069f93a28b03fccb59a4e9fa1e6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":7662,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-07-28T16:15:18.542206Z","times_seen":186,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.798Z","timestamp":1785255236798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/config?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ncf-ray: a2252c8e1a6a56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":337,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1effed41c1c03e882459e0873f7ac611","sha1":"277284ee8d06d2141966c9360a9b1c68d680c818","sha256":"6fa1fe1cd6debd64f7a9f93660a341684169fea401e63a3a11464b66d9de611a","sha512":"1da0d011cd5084c818676ee1db11daa67520b1539d3dba53c90c0a85d278a8c857a853315466c2d8735401d8e084b97d803f15a80084a1f10f0db460db73ba80","ssdeep":"","tlshash":"8f60003c030000000303c033c0000f030c3000c0003c0c300c0cc0f003c00000ccc003","first_seen":"2024-10-06T09:17:07.97198Z","last_seen":"2026-07-28T16:15:18.543047Z","times_seen":43,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":65,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/receive-ba048af1.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.913Z","timestamp":1785255236913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/receive-ba048af1.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg-b.b-cdn.net/assets/index-511fa38d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da97-19fd\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:23 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7282ced64a0c2904cf105fe7029f8db6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6653,"size_decoded":3496,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1038)","md5":"22baef097fbc936a24879952b84f7c9e","sha1":"707c37c225a773e76bf50f1ec2de8c5e1cd0ae01","sha256":"4fbf8bb8dac342e66abd3a4dc18206ec46c19a3ef2f598abcdb40be4736330b4","sha512":"0c95dbae4a7c3cbd4d408a27e6dc6d3584c5a4ca6d311c0a609490267762a681999a2dc1d81582da611a9c1e0d541a5955629108046fd6d4fd254a6460909c05","ssdeep":"192:WsH9KKjVyeIWuIevxqeOlFhlmpqWF+yNX:WxzvIGDOlblmpqWF+yNX","tlshash":"b1d1c64559f6389db903e05c1aab9a00c131100b852dc5fdfafc93e5cfe9a4689ef722","first_seen":"2026-07-09T22:10:07.02384Z","last_seen":"2026-07-28T16:15:18.543906Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.944Z","timestamp":1785255236944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a2252c8f0c30c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":36247,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-07-28T16:15:18.544707Z","times_seen":702,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:14:01.923Z","timestamp":1785255241923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1606\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nCookie: cb_dm=c7af4898-3198-4ca4-aa1a-807b05400746; __cf_bm=WT24LvLNYEIk9yrLeIOlbXAQkqNElWQSBd7h2GAxeig-1785255237.1523044-1.0.1.1-HR49IHWxPDZ9iuAI7MXXvLYAc4A1o.UzolNMHzKgnKCcLjO.jGGNpRWO4b9KsvkQeJlwJY4Wx4nUvRPMSvHMfzk8bEn6r.WhyRtj35.qYB3X7w6wybp4s8ah1uUvC8YW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1606,"data":"e=%5B%7B%22device_id%22%3A%22dbf485ca-c6cd-4fa6-8b2e-03c40c3a2e1e%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785255236960%2C%22event_id%22%3A7%2C%22session_id%22%3A1785255236907%2C%22event_type%22%3A%22perf_storage_estimate%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0.4689%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785255236835%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226bf32185-2502-485b-95b8-74d501084bce%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22fe8f02f4-89e2-4d9f-af85-8ce61fc04f4e%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A7%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785255241913\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=18f4db56f0311edf19b3c605971190af"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:14:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ntrace-id: 5243097749380693129\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVEAOXEIKZV6Qrl7JN63sePlHpY8WjjDy%2Bxua1TfyFC8IIUZlyp51O14Epa35CunVlFX8p6r%2Fa59FPwW6SVd%2BW6XVx9hKU9me34ML%2F910eOvxBXaZk%2BadH1jF5VKIrmiGRTYwxGiJw%3D%3D\"}]}\r\ncf-ray: a2252cae0a03dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":722,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-28T17:15:58.03507Z","times_seen":35941,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/Url2CfvkS4yP.js","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:53.813Z","timestamp":1785255233813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /Url2CfvkS4yP.js HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"c486e-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":804974,"size_decoded":161288,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-28T16:15:18.545416Z","times_seen":123,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":78,"receive":60,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68caaf537569afdf5b2312c1_68cacd9444a30e1d0838e585_wave4-transcode.mp4","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.373Z","timestamp":1785255234373,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68caaf537569afdf5b2312c1_68cacd9444a30e1d0838e585_wave4-transcode.mp4 HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 658630\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"a0cc6-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-658629/658630\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":658630,"size_decoded":658929,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"eaa8f66ad368db5ea85410fa41a18841","sha1":"2e3afe1aa4f23ecabb58d21ae947bb3498348e6c","sha256":"2839e841b84a5a843db3c5f071cf6f6621cac344ced286e9111dc2ef56751358","sha512":"94e76ed41bf8196e0d3ca2f343e113c248b14fd83cb2c87d33092fcd89981390eb8839c2059a3dafab1f757afa3ded627cc4293d00135bebdf01ef3cf3960ab1","ssdeep":"12288:r+bRRcbgwXagXzH5Bx/eE2N87VYo7ubmC7Cc5jOfZNHgoQPRfncTvrt+Y:ybcbpnFeDzmrdZhgoQP9Yt+Y","tlshash":"9be4337842642e6fe0fda83090dd3a193588f334e5aa177f6ab2246dbed14290f05fc5","first_seen":"2026-02-23T06:27:15.816159Z","last_seen":"2026-07-28T16:15:18.546337Z","times_seen":26,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/68caaf537569afdf5b2312c1/68d63af08b5cfcfd77ce6c6a_webclip.webp","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.813Z","timestamp":1785255234813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 07:47:28 GMT","end":"Wed, 02 Sep 2026 08:47:21 GMT"},"fingerprint":{"sha1":"62:1E:08:5D:94:79:36:E4:D7:80:E8:C4:92:1E:7D:7F:EE:0A:E3:52","sha256":"41:03:C6:89:69:F8:01:32:88:5E:0B:58:7B:E2:C1:E3:4B:A4:7E:A3:0C:A5:60:42:D9:34:2F:E8:43:F1:88:B0"}}},"request":{"raw":"GET /68caaf537569afdf5b2312c1/68d63af08b5cfcfd77ce6c6a_webclip.webp HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2566\r\nx-amz-id-2: Ana2OradEO4798moKZUc/MOUDUlodhhryDpmkzRqlbg05bdngi35ws3rfUmJffmtEeXkRVhnhaTuHv0Lgtfn1C7272ndIbt1\r\nx-amz-request-id: 9AG1WBXYM5EKKDKD\r\nlast-modified: Fri, 26 Sep 2025 07:04:18 GMT\r\netag: \"a9d186ff19d7897b162403d438b37264\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 73thyl0TqNMrAJ0fKUkKdZ4FTSC1gu3V\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nage: 12680277\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: a2252c81a8184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2566,"size_decoded":3256,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9d186ff19d7897b162403d438b37264","sha1":"bac8b841f1c7ccff16b49578a6a6e4bba3d9af26","sha256":"06246d3959761f8f79f7583ad7f137ec8b9c0ee73b100601bc0d3b50eae50845","sha512":"682e593cd95957b0a3b3c6a3424cd4dc02fbd6493d04f9c26b28684debb40277644021684f9758507436528040fe340ac67e2e62b2e67bda2a21b48ba72f5575","ssdeep":"","tlshash":"4351e7a3179946ead1814c3c81f40b67f65c3c6bcb882b2378a14339ab0a5a41a5e34e","first_seen":"2026-02-23T06:27:15.834818Z","last_seen":"2026-07-28T16:15:18.547191Z","times_seen":33,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/send-bb23cecc.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.907Z","timestamp":1785255236907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/send-bb23cecc.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da9c-8313\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:28 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1097\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e346d72fd4f0ca31a8b76a90c128702e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33555,"size_decoded":9701,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1859)","md5":"9bb6134ab8668105bd6b354bf395e69f","sha1":"fde54db9036e967ef1f9a39ef23f86c7f17001df","sha256":"a4945bcef122e828a6bd3ea350424a8c3c5d81624702d31e086362bca68d14b5","sha512":"ac764a071be886c56b849d01b45c74e13711ecf9b7e13d94bc6b8dc4f3647db552ccc2b152a8713d204e67af5b8452d4d3fcb0b0d4ee8b055b37dedc9472a13e","ssdeep":"768:HaYsioM0DBzIaErALdwmBwfZmTLsRCjeHu+DJd4XwMPzGiY623a7vl6CcT16I8:6YsN9zIaEUXqt4XzPzGB5K7N6CcZ58","tlshash":"73e2c69033fa281d2aa791ad99e65e0053215017c11cc5fefaece2f18fa9e4248f7770","first_seen":"2026-07-09T22:10:07.023006Z","last_seen":"2026-07-28T16:15:18.548021Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/696620b7a398c00ffda7be89_zebec_81.webp","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.340Z","timestamp":1785255234340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /696620b7a398c00ffda7be89_zebec_81.webp HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/zebec-network.webflow.shared.6c378a307.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Length: 38506\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"966a-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38506,"size_decoded":38727,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ae9c09ca8c9defaf200e147ee97fec4","sha1":"dfe28afb9ba3f04814fe27e87afdeaa0ec9b3e77","sha256":"68f9dcbaf89cfbf67c9eb7d0f059eed749d769f679a5d8ddd42b6d90064da7c7","sha512":"a07c463a5b02f15740a3d3463bfd536cd1829bcd672e3471da3fe61b51fbade88ca49ac88ab63d51d32969d0a6a4e48f77a50965fc36d5af709d568406c9e9bb","ssdeep":"768:skBW3SWAWiZlGv07hevQzO9R2jbaI37cUoKI:F9lEvQq9R2jx4/KI","tlshash":"8c03ce2f6ac45d75c85a6132a2cf3f41f6df62382a6405e8d77103258b2e5dacf2e90c","first_seen":"2026-03-13T01:58:24.897773Z","last_seen":"2026-07-28T16:15:18.548972Z","times_seen":34,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.362Z","timestamp":1785255234362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"8fbc36290c7d7e6ed3d8aa9382cef481","sha1":"f5c15e180475849019b212cf59a807ee7b8c49bd","sha256":"5ae7e3ab795aa4a69c41996159e0d6e78d03af6fd40d92391d2e2e9640d4b247","sha512":"487655c131257bd145e4cfa9916439f93b7733d884813bd52669739fe169001c36b735adc08b4add0e333f16a16179a3670e09a75df2c37afe6cbdc8ed03c091","ssdeep":"","tlshash":"2231a8bbaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a96491033ac8","first_seen":"2026-03-13T01:58:24.902312Z","last_seen":"2026-07-28T16:15:18.549962Z","times_seen":32,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.468Z","timestamp":1785255234468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 16:31:02 GMT","end":"Thu, 17 Sep 2026 17:30:59 GMT"},"fingerprint":{"sha1":"F7:54:4A:9D:6B:E1:CD:3A:65:6E:78:70:32:E7:F7:52:52:4B:BB:3F","sha256":"05:07:06:AE:71:D9:04:67:14:12:6F:4C:BA:D4:3F:4B:04:0A:99:26:A0:34:D1:22:42:4E:76:04:43:CA:B9:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zebec-vote.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: a3JTWH2Whjk0KnB/DlMuww==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Jul 2026 16:13:55 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: DZVU31pDDncJHGIX9dUJMv4T7ek=\r\nx-via: het-fal-2075395\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28ux4xzBpPxFMeuxdenTbi6MmBqwWBCP874nP3wgX; HttpOnly; SameSite=None; Secure; Path=/; Expires=Tue, 28 Jul 2026 17:13:55 GMT\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a2252c7f9eb11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":674,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":0,"dns":16,"connect":14,"send":0,"wait":950,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.651Z","timestamp":1785255234651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"5b273ad4e3196304514242ec8eae62f2","sha1":"c6c02b6c0117b87e81d7ae81caedc5d64f8eb210","sha256":"73b32aedddbbed4c1a61588ef7566397f7daf592cc2fbd91d9f35f58e606900e","sha512":"1116560d6524c0cf29db24d879c7da0abc588d5fdf2c616071e64cd924fa416c9e7d87c06439a84bba7a4b2ac721314edbfeab5a8cfc18c5fde3abf135efdb14","ssdeep":"","tlshash":"5631a8bfaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a964810339c8","first_seen":"2026-03-13T01:58:24.888155Z","last_seen":"2026-07-28T16:15:18.513671Z","times_seen":32,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.653Z","timestamp":1785255234653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLuYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"5b273ad4e3196304514242ec8eae62f2","sha1":"c6c02b6c0117b87e81d7ae81caedc5d64f8eb210","sha256":"73b32aedddbbed4c1a61588ef7566397f7daf592cc2fbd91d9f35f58e606900e","sha512":"1116560d6524c0cf29db24d879c7da0abc588d5fdf2c616071e64cd924fa416c9e7d87c06439a84bba7a4b2ac721314edbfeab5a8cfc18c5fde3abf135efdb14","ssdeep":"","tlshash":"5631a8bfaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a964810339c8","first_seen":"2026-03-13T01:58:24.888155Z","last_seen":"2026-07-28T16:15:18.513671Z","times_seen":32,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/hashTypedData-6bbf20f4.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.777Z","timestamp":1785255236777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hashTypedData-6bbf20f4.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da70-10c2\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:44 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1276\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5760716b5ed989ef7dfcd470cd8e7323\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4290,"size_decoded":2821,"mime_type":"application/javascript","magic":"data","md5":"8525ec0e30cb8ad90f23b4d7667438fb","sha1":"cff460b1940ff24361dc888d3553c817bd24c3ca","sha256":"70d3c8c529dd0283b9e588287f5a0f18588a471bec5a552026f662df63d4003c","sha512":"adf2c5719664b6c49eda7b06f59c1cee0ce85f079bc4eb54d691100c08ee4257e0c4872889eaa6b8a81e8bb935e87d1070713617d1b3d827653afe2637e3d827","ssdeep":"96:sBb/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sl/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"a991128c71a5f5b42ecd09e8e0e72101e6e4ac11f47488e3f1ec65f325a296da57a72c","first_seen":"2026-07-09T22:10:07.104374Z","last_seen":"2026-07-28T16:15:18.550877Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/WebCryptoP256-30d9af46.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.778Z","timestamp":1785255236778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/WebCryptoP256-30d9af46.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67daa5-18af6\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:37 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1073\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7ad78864789170c29e3ef896af3b8111\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101110,"size_decoded":34033,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25222)","md5":"919de8000fb179a9e65809362b8b8c57","sha1":"fd8061b623bcba4f7a2b226e2e12bed6df451a77","sha256":"4c2fc69edd92f2477755fe8fcbc24ae4e8f79338cea6e7dff1d6448aabcec315","sha512":"91726a7f785dbcbe8a18470fcfd39b857332daf19cc93e8932a1f24154629ce165be285f60b3b6e3db3261d6f9117c785243f9cbc2166ab944ed45d60a32fac5","ssdeep":"3072:D+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:Xpf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"06a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","first_seen":"2026-07-09T22:10:07.092122Z","last_seen":"2026-07-28T16:15:18.551756Z","times_seen":6,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/index-d22e46c9.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.916Z","timestamp":1785255236916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-d22e46c9.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da76-1003\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:50 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1075\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b10a1b22089305255fc97b4f10c2263c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4099,"size_decoded":2277,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"9784485aaeb3fe0fd18d67e9b5a793eb","sha1":"1653f1c96b4a0ff1776cf9e74984f9df2a784881","sha256":"4a5620922c6dba26ca04b97459cade09b01a41cae32659987352f9da9b595287","sha512":"12831d209853ccbd36602cf427339a593e3361ef8cab1f3f31823f48d323582ff734b04dbfaa19ac77e0ecdb604d6d06e7923566976812babc483267fa749169","ssdeep":"48:AgZ9buEQM7ooRKhJwi7QSDzP6lgar+KK3/oZzEPuP:AIgEQM0o8hJwisSPkgaDIQf","tlshash":"7b8116c57fa825a53713c060aa9e4c15f331a023a8199f6e7a9db0f88f55a43781d373","first_seen":"2026-07-09T22:10:06.981092Z","last_seen":"2026-07-28T16:15:18.552601Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.500Z","timestamp":1785255234500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zebec-vote.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DW43ZGbWiU3rFBXe7XQYaw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: Z9H1nzEQCYJ4P4udL4J0LJOcxmc=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":120,"connect":109,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.506Z","timestamp":1785255234506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zebec-vote.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: cUv7K38PcE2k6+Pgay+7Kw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: i+RIIUWV4HMQ+tFkwxHtTb7mYfc=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":129,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":271,"connect":353,"send":0,"wait":86,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.942Z","timestamp":1785255236942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a2252c8f0c1ec272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":42719,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-07-28T16:15:18.553429Z","times_seen":664,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":3,"connect":5,"send":0,"wait":9,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.959Z","timestamp":1785255236959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1573\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1573,"data":"e=%5B%7B%22device_id%22%3A%22dbf485ca-c6cd-4fa6-8b2e-03c40c3a2e1e%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785255236957%2C%22event_id%22%3A5%2C%22session_id%22%3A1785255236907%2C%22event_type%22%3A%22provider.request.started%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%2288e96ebe-870c-4cb8-afd2-84e48b877a12%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fzebec-vote.xyz%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785255236835%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226bf32185-2502-485b-95b8-74d501084bce%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%227de4a569-34ce-4eee-84c6-c74243953bce%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A5%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785255236957\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=7c0118353ed52461d1b93019ebedd6d3"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 1654418117887432234\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCLHf679AMCwbTrZj6%2Fj4itym11HEDrEF4fwlpyiii0lCrdwz058ocksXkCpbKEta9HXUGwb9uHjm5PDWQ0Ctgn7WATUEnWfYvznWJRvgx%2BR%2BzEPBn2nPtVbVVfOEN%2B8rqdhHzJorQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=883ee719-0653-4747-93f8-4f7c33a16feb; Path=/; Domain=coinbase.com; Expires=Mon, 28 Jul 2036 16:13:57 GMT; HttpOnly; Secure\n__cf_bm=DCpd_yarDVmfELQzbe7q8x.ehSF4ogmECDGbl0MX.rE-1785255236.9832532-1.0.1.1-9eE4Qs79X3Zox0z8xujVWNv259K_lZPeYfjjvNSWn7lDSN1nF_Wb0WD1qDce1Ry54ltsTLdtA_TKytAgLGCcIB_dOZTWszYpS1mO6RIBtz200718toAdlJpI_4tB1Cnw; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Jul 2026 16:43:57 GMT\r\ncf-ray: a2252c8f2f4edfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":1171,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-28T17:15:58.03507Z","times_seen":35941,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":6,"dns":1,"connect":3,"send":0,"wait":111,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbeugaufg1-8-26hbaaaaddoter.fly.dev/notify-visit","fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","domain":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","tld":"fly.dev"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:14:00.855Z","timestamp":1785255240855,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: hbeugaufg1-8-26hbaaaaddoter.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:55.887Z","timestamp":1785255235887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:55 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a1e0042-142492\"\r\nlast-modified: Mon, 01 Jun 2026 21:57:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 12:07:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 568f7b4f2ac25225b64d261027c84e9f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1320082,"size_decoded":282438,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a06dcf0ae36eb0d74fafb9d09c6033d","sha1":"1960604fc7fc992a758d80ee2873c12fb0ff3848","sha256":"80242312c3b0d9ea60b6832c3fbc11b201dd03ffeecd83166eb6eb92f77530d9","sha512":"c5bc4dbeaae92111099a1d44e55f9e596c5f10e451cadb0cec44d9e2f2613990e1b79c01e55d013862f847eac6b65ff16e400de43867a066004b4694e981cd76","ssdeep":"6144:QhivC79jNxCwz0SVwnFf7ogej4YPHZsnP9BqWdw7wF5SdwZFsGD:QQqJr/0SVwZmzHCD","tlshash":"22255deb0bd1892db4afd951de3c4c7c40f686622d69218be613e9cbd68c3744f49b48","first_seen":"2026-06-02T08:49:54.145531Z","last_seen":"2026-07-28T16:15:18.55426Z","times_seen":164,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.768Z","timestamp":1785255236768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/vanilla-a524d433.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67daa1-15f1\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:33 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1030\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 621f94a5b5ad82fb6fdd1eeeec110e66\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":3556,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-07-28T16:15:18.555138Z","times_seen":181,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/secp256k1-faaf71c2.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.776Z","timestamp":1785255236776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/secp256k1-faaf71c2.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da9b-8955\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:27 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1097\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 73a6c190c046aa22dadc925a83625e3d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":15924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"00b2a1553079b769cdb0f1c740a2294d","sha1":"b9acc92c0c398a2d5140ca28ad8d05a48ec1b9f8","sha256":"b8f52f01c9989fd40b6bcdfb10c4e2bb1e2205350d7f6b0af970bb4f2bdcc454","sha512":"c451dbb1e06003f5809e91d558f2823194984e4713b96c9eeced451b7f21091b9164dd6a19a9ff99042a3dc1e2b9b82b4fe5d977b58865ff73294dafcc1c97fb","ssdeep":"768:s+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Tl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"1af2e84422d1747293fa28d005725102f675ec64b1cf8c90e59c8dbb3ef74a98ab6e3d","first_seen":"2026-07-09T22:10:07.038592Z","last_seen":"2026-07-28T16:15:18.556055Z","times_seen":6,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.933Z","timestamp":1785255236933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1601\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1601,"data":"e=%5B%7B%22device_id%22%3A%22dbf485ca-c6cd-4fa6-8b2e-03c40c3a2e1e%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785255236910%2C%22event_id%22%3A4%2C%22session_id%22%3A1785255236907%2C%22event_type%22%3A%22provider.request.error%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%2217e7071b-9ae7-41f4-a3ea-0744bdf950bc%22%2C%22errorMessage%22%3A%22%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fzebec-vote.xyz%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785255236835%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226bf32185-2502-485b-95b8-74d501084bce%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22eb9019b1-57c7-4567-8ebc-6271d62e76c5%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A4%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785255236911\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=62a6bc0a9bb0cfa58a4ceff65d87e48e"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 5869515710116716197\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFxH8wR9%2BXEMeo4y8qKWNKbH2U9HE7AEKMBM%2BeCfnbZmYwX7RuNokYRkUuYHbCggr1mwedEJqlV6P8ZLLhotgl2zS78vVX2VhnMh%2Bt7nhQ1cfx1%2BBRWRwOiNyVnMngTC9yPeLN7RQg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=c7af4898-3198-4ca4-aa1a-807b05400746; Path=/; Domain=coinbase.com; Expires=Mon, 28 Jul 2036 16:13:57 GMT; HttpOnly; Secure\n__cf_bm=WT24LvLNYEIk9yrLeIOlbXAQkqNElWQSBd7h2GAxeig-1785255237.1523044-1.0.1.1-HR49IHWxPDZ9iuAI7MXXvLYAc4A1o.UzolNMHzKgnKCcLjO.jGGNpRWO4b9KsvkQeJlwJY4Wx4nUvRPMSvHMfzk8bEn6r.WhyRtj35.qYB3X7w6wybp4s8ah1uUvC8YW; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Jul 2026 16:43:57 GMT\r\ncf-ray: a2252c903a8edfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7,"size_decoded":1171,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-28T17:15:58.03507Z","times_seen":35941,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":111,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/metrics","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:14:01.868Z","timestamp":1785255241868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /metrics HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1987\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1987,"data":"{\"metrics\":[{\"metric_name\":\"perf_redirect_time\",\"page_path\":null,\"value\":0,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_time_to_first_byte\",\"page_path\":null,\"value\":131,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_ttfb_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_web_vitals_fcp_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_storage_estimate_caches\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_storage_estimate_indexed_db\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"supported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"}]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:14:01 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 8093249115893707344\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=013007ee-cb8f-4702-9181-0b4fd1b207a0; Path=/; Domain=coinbase.com; Expires=Mon, 28 Jul 2036 16:14:01 GMT; HttpOnly; Secure\n__cf_bm=ilBJkQtUt9f4O66L1ixdfF2h1acYZZKZqwq8Yd3l9Cs-1785255241.8705075-1.0.1.1-DOeN.vCZATPrhNpyfKjRMTLR3uH0KJw9.U4EL0d23go1cnA_RqeRHcDSFJn3_8gtSevHcAOZ.e0np5KZ0TuT1GSjxurQO6DhY33aEmrbdmJirgCMQPeqolzKnS9mqPXW; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Jul 2026 16:44:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUXcT6wcI65TEm%2BHIiaRwTsp0yv08eSG6TV1zb3j2ix3WzocrxiRywCHPAbsaK5yO%2FjDIOWWf0fL9B2P34xOYLjMq1BXP61jtRwH%2BXr75ao7i121EpPpaYvAp7jmdCqQYtP9%2BCsN%2Fw%3D%3D\"}]}\r\ncf-ray: a2252cada8cddfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3649,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.823Z","timestamp":1785255236823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:56 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 16939\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"10e34-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":314,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.940Z","timestamp":1785255236940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nage: 238\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a2252c8f0c2ac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":42599,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-07-28T16:15:18.556968Z","times_seen":705,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":4,"connect":4,"send":0,"wait":10,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.211Z","timestamp":1785255234211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zebec-vote.xyz/\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:14:00 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, HEAD, OPTIONS, OPTIONS, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://zebec-vote.xyz\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWGCV2jPhVOHqhhgqHWQMdb6zf4eK2nzlUY26kEveKo0G2QsKLWnqe%2FxRg%2F7G%2B7KvZW3w8ocwq2zJ8p%2BSFT16NgpN92ToJfrh12Q2ZUyhvVSMGYAN61Muzsr\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2252ca5bf5a5689-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2104,"mime_type":"application/json","magic":"JSON text data","md5":"56fa0cc157befab41f7ca09bcbcf6ba0","sha1":"218ffc9c9caa468ff56f9abdec6fa8b77eea1362","sha256":"56ae1d62ced9e47f11decc4556f9a81def550c64ba66d466f3e5e979b7c7f43f","sha512":"0b3072e63f5c820a9042ed809be9a4ab9d051727b474a7eaf65a3e2e4275d724dce3bc3f55b7179634fa1907bebe0f1e7b302af0ae737104e53a8517fb028323","ssdeep":"","tlshash":"3c01df68e4780f7b9cb8135870786817113462175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-07-09T15:47:21.439328Z","last_seen":"2026-07-28T18:58:03.074813Z","times_seen":897,"resource_available":false,"data":null}},"time_used":6606,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":225,"receive":0,"ssl":6378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"ipapi.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDuYMZhrib2B.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.654Z","timestamp":1785255234654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDuYMZhrib2B.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:13:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":1635,"size_decoded":1974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"004d0c2dc54d6e5c592ebba39824d82b","sha1":"2917f9c5a5cedbd99a504982378e9004105e7f32","sha256":"1af23ad04b71a15d638317ec249a312950a8ea3c1dbec5b4658390696956d053","sha512":"2b765ca379a894cf814c24d1edb1656e21457d98647fa3296154774c410b25856d3bb94674eef9578a9356200a67950c153911bbeba3912f1087f8f5e0c0ad09","ssdeep":"","tlshash":"5a31a8bbaccd319fa82fc0a19483a11461968d81f345cbde674dc675e4a964810339c8","first_seen":"2026-03-13T01:58:24.890405Z","last_seen":"2026-07-28T16:15:18.531123Z","times_seen":32,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.91","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.744Z","timestamp":1785255234744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zebec-vote.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: BAW9LQRliPt1aqZUGR8BDg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 13Hin24GbEkCh8AHCRTqSFtbuT8=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":25,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/parseSignature-636aa378.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.771Z","timestamp":1785255236771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/parseSignature-636aa378.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da7c-8d0a\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1276\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 66401eb9a4c5c34b6b372fb139a16638\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36106,"size_decoded":14395,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32522)","md5":"12d3f7b322228366c870da5d4eba33a1","sha1":"0c64599666d8621c4fc574c282dd7a4a95b8fc98","sha256":"f2c3d436ba59839208ab83da55c92b47a6ca1b537eca728225b17a44c7981ea7","sha512":"67c4645b4324a73489b8426fc9ffe8d38af62816d84483f1eeb2a1c76a99d95fbc078064c749a6c4a65e0d65c5b71ca1e4a00759ccd9bc873b090d5d8b623ecc","ssdeep":"768:+JvPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+3NEogBL4G10Pu+hcnXb11a","tlshash":"09f22b88b5b9b07193546894d05b6202a228fdd9f40e80d1f36ecd7b2ff944cd9e5a3e","first_seen":"2026-07-09T22:10:07.026029Z","last_seen":"2026-07-28T16:15:18.558516Z","times_seen":7,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.961Z","timestamp":1785255236961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1601\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1601,"data":"e=%5B%7B%22device_id%22%3A%22dbf485ca-c6cd-4fa6-8b2e-03c40c3a2e1e%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785255236958%2C%22event_id%22%3A6%2C%22session_id%22%3A1785255236907%2C%22event_type%22%3A%22provider.request.error%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%2288e96ebe-870c-4cb8-afd2-84e48b877a12%22%2C%22errorMessage%22%3A%22%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fzebec-vote.xyz%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785255236835%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226bf32185-2502-485b-95b8-74d501084bce%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22414aa372-4506-4fd7-9b52-b78944a853e3%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A6%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785255236958\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=148b7a5ea46e27215f393d2ae864073c"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 8924558289734078960\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIW7mkJlvl7HSNXGZpF4eWHBVnFc0XPr3rZn%2FWqe7kX3xjAsF4VhhKCccGGRi9aqGHQkX108EQg7DdnLvPp5aQODP%2FpdcDnZELFSpmsGXQTKmZmVGc84F6gYpkMU4GFSVNp3fwAsuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=136d3494-6ecd-49e5-a82a-b6bccc70228e; Path=/; Domain=coinbase.com; Expires=Mon, 28 Jul 2036 16:13:57 GMT; HttpOnly; Secure\n__cf_bm=D0BKw3gjTycGSrziQFfvVFLxQbh7_qqAeL2P8UcSvOs-1785255236.9835567-1.0.1.1-txOjDkh9sTaWxvDJyxR7zPfZE7_eam4rez7CVPOO1pCnQdSaSf.QeKw_cLqZYTqH4OPVOjGu006VJf5VwPLvLCHD0zy._Bkbu4OpSBlVK.iKLnqKTED0fE8zlpZtoyfJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Jul 2026 16:43:57 GMT\r\ncf-ray: a2252c8f2f55dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":1167,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-28T17:15:58.03507Z","times_seen":35941,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":5,"dns":1,"connect":2,"send":0,"wait":112,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:13:53.500Z","timestamp":1785255233500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 16939\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"10e34-11ef9b4758000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69172,"size_decoded":17253,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6885)","md5":"c66ef8001310af2171f648d5b753c896","sha1":"d49e242721e9cb946cbca54711aac8147042074e","sha256":"b7b9d55eaf33f6ebbacff902ecf122a6755101bc4e8553327a9c28b9d1b9a938","sha512":"7bf59b2469f39debe544a944facd270eb5684456bbdbeae557d1b68ea26de3170f9f16e89e5b727ea0015285a79e2726fa2d8d535994df68a10041e41dcc57b0","ssdeep":"768:zwIN8ti4wwBf6liKU1PjCXN71oDzQ70+c:EjU4w26Jg7ADoDzQI","tlshash":"13637071a5f01073008381d8aaa6bb2f7e91e64bca478985b6fd57c19f83cd2ed4395c","first_seen":"2026-07-28T16:12:16.967842Z","last_seen":"2026-07-28T16:15:18.559339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":58,"receive":6,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebec-vote.xyz/68cab4c77d24b10a0c74c137_zebec_logo.svg","fqdn":"zebec-vote.xyz","domain":"zebec-vote.xyz","tld":"xyz"},"ip":{"addr":"192.162.199.139","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:54.377Z","timestamp":1785255234377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebec-vote.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 16:47:54 GMT","end":"Sun, 25 Oct 2026 16:47:53 GMT"},"fingerprint":{"sha1":"D3:D1:53:00:EF:C8:1D:5C:A8:41:20:44:87:55:D9:D9:EC:4F:7F:79","sha256":"37:74:C5:53:01:F6:B9:6F:D6:A4:43:E7:77:0F:6D:EF:FB:8A:47:F9:35:32:CD:9F:1C:1F:37:92:2F:92:3F:38"}}},"request":{"raw":"GET /68cab4c77d24b10a0c74c137_zebec_logo.svg HTTP/1.1\r\nHost: zebec-vote.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 28 Jul 2026 16:13:54 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 167207\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Jan 1980 00:00:00 GMT\r\nETag: \"28d27-11ef9b4758000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167207,"size_decoded":167459,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c842d802bdf383a677d1ed0f17e6cc","sha1":"b9195da382c816a727340866648762dfb183d3b6","sha256":"33cdd00f50418f2cd6bb0af619b5c5489feaa9fde94451dbffbc934c2c9a293d","sha512":"f7964c04ee452383c290842d54ea96227a210812507c71752258b37452460d4e0927df752814f44af48b84837291aa63cf67116706c7462ba4ad442ceeead503","ssdeep":"1536:dviREkiRGPI1GIGU0oFJpWoxHce5+Z66ZBoKo6ZmuESU+4xd:lkKUw","tlshash":"2cf3b7e5739971e06402e7a18ebba4773a272cfd6f02d6d906805d61d9914afccaccc3","first_seen":"2026-02-23T06:27:15.823645Z","last_seen":"2026-07-28T16:15:18.561029Z","times_seen":36,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"zebec-vote.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3731bmtv859.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:55.892Z","timestamp":1785255235892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-3731bmtv859.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:55 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a602142-256c5c\"\r\nlast-modified: Wed, 22 Jul 2026 01:47:46 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 12:07:55\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 07cc9270d71255ed351cdc1a18efc5ae\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2452572,"size_decoded":457295,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"74cec5566d414cead09280cba38ad752","sha1":"fb8f0b0fd1dc4318c57d91487534cb03b73f5825","sha256":"133dae78753afedb7e27f50d8831a718aaa7ab975ec1af4cd31c4d8cee8a779d","sha512":"65b6ad916cd88550da24fe60756a26bea459097a4c154e83536b2b2ee65a72b7247e178cb288c9b2eba2e12801584f4ae8c8d261581e70dc02bbbaaa69dbe4e6","ssdeep":"1536:e8u8xGlLA18uoEw6gHc1HSsmzgOgv7E7J50vPTr7p:hurlLQ8dEscdliGXTrl","tlshash":"08250cfb07a44d3ec0bbe945dc71ac5c50f99ba14e6e5545ad23e88bd74c7a80a8c38c","first_seen":"2026-07-24T11:50:10.987155Z","last_seen":"2026-07-28T16:15:18.561943Z","times_seen":42,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"fonts-css2-sans.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/localBatchGatewayRequest-d1999229.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.773Z","timestamp":1785255236773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-d1999229.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da79-6f5\"\r\nlast-modified: Mon, 27 Jul 2026 22:23:53 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1276\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a479af5f8a3bd5de14d068e5d36ad4e4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":1850,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"7d88eeffb214c5d2b6f3dc73f85541df","sha1":"0b22de7fe208c93d95c2eaceebde9def561aff29","sha256":"dbd244922a1351aa4764b5cb8eaf6f8a7a86ecb24bd9e58ff897c7748fb50c97","sha512":"23e8b40a51e06048ab451d727a21068e917e3f5c446395077a03506fff9d4954008c791dd5432e53d3a3e3f1f942de2dd6d86a33b7bb546dd5118d705d4b3f88","ssdeep":"","tlshash":"cb3151c8b609aa32e4af2932640fe55494312945a82d80b1d94f35f79f315c5aaafd1c","first_seen":"2026-07-09T22:10:07.058194Z","last_seen":"2026-07-28T16:15:18.562802Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg-b.b-cdn.net/assets/SwapController-2e16b6f2.js","fqdn":"data-image-svg-b.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zebec-vote.xyz/","date":"2026-07-28T16:13:56.911Z","timestamp":1785255236911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/SwapController-2e16b6f2.js HTTP/1.1\r\nHost: data-image-svg-b.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zebec-vote.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zebec-vote.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:13:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6228298\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a67da9d-396b\"\r\nlast-modified: Mon, 27 Jul 2026 22:24:29 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1030\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/28/2026 16:11:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 239399a9b6da7e840b7d90ead9dda6a2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14699,"size_decoded":5558,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14698)","md5":"8c77fb655311df29aaac9a646cd45743","sha1":"06ca5136e975b3b97ef6fd51172dc063221c36ae","sha256":"76a2bf277b519f749984dbe72f018ece0ffb3509450e3179377c1b75f95f1b25","sha512":"a58a249a2b5b83b2fc5973bd6f73bfd1f559bd4b8d326b2e415629ea81144370cadee866fda7bf752dae75a195e8fa724bff93a1b7484f52645989887172b8e8","ssdeep":"384:3tEUnUFX5mq2YlqWfVgGVd9MYpah3KXMiyV27m1OyT3On:9JnUFJmqjtfVgGV4Oq8pE27m1OyT3O","tlshash":"8d628466b3617172b31db588a6f6032011163cd4d86ef4e8f4ae16e30bf159f1adb931","first_seen":"2026-07-09T22:10:06.994283Z","last_seen":"2026-07-28T16:15:18.563725Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}