{"report_id":"a111ce1b-d0e1-4bb4-97b6-99b1a438fae3","version":6,"status":"done","tags":[],"date":"2026-05-29T11:03:24Z","url":{"schema":"http","addr":"vote-squidrouter.xyz","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"172.67.151.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"title":"Squid - Bridge, Swap \u0026 Build Across 100+ Chains","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T01:12:16.120648Z","times_seen":17927552,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vote-squidrouter.xyz","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"172.67.151.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T11:03:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-29T11:03:00Z","timestamp":1780052580,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47170,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-05-29T11:03:00.355982+0000\",\"flow_id\":1786016824578199,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":47170,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-29T11:03:00.348311+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"api.vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-05-29T10:53:32.524271Z","alert_count":0,"request_count":4,"received_data":21691,"sent_data":1811,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.vote-squidrouter.xyz","ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-05-29T10:46:38.834031Z","last_seen":"2026-05-29T10:46:38.834031Z","alert_count":3,"request_count":3,"received_data":591063,"sent_data":1518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vote-squidrouter.xyz","ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-05-29T10:46:38.83584Z","last_seen":"2026-05-29T10:46:38.83584Z","alert_count":6,"request_count":6,"received_data":63139989,"sent_data":2697,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-05-25T13:19:56.122118Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-08-09T23:31:15.878604Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-08-09T23:31:15.872733Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","size":1111,"data":"","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-08-13T23:41:17.414607Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","size":71,"data":"","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-08-13T23:41:17.404419Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /mipd@0.0.7 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /mipd@0.0.7/es2022/mipd.mjs\r\nx-typescript-types: https://esm.sh/mipd@0.0.7/dist/types/index.d.ts\r\nage: 68981\r\nlast-modified: Thu, 28 May 2026 18:17:19 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a03502938ae556bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-08-13T23:41:17.404419Z","times_seen":168,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 68982\r\ncf-cache-status: HIT\r\ncf-ray: a0350296881156bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-08-09T23:31:15.872733Z","times_seen":108,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /mipd@0.0.7/es2022/mipd.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 638\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 23:17:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 68982\r\ncf-cache-status: HIT\r\ncf-ray: a0350296983356bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051)","md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-08-13T23:41:17.414607Z","times_seen":196,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:00:01 GMT\r\nexpires: Sat, 22 May 2027 14:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 594180\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-17T01:12:16.106747Z","times_seen":260301,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":89,"dns":1,"connect":28,"send":0,"wait":29,"receive":39,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.vote-squidrouter.xyz/?req=ping","fqdn":"api.vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-squidrouter.xyz/\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 14\r\nset-cookie: PHPSESSID=c79bffedbdaf163e3d7f2505f5efee4f; path=/\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.6\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FktTprSkgNvBTqpX%2Bq18VUaRO5NJPJNE2MS%2BEpvbyoHgJroU0wEK7v7UKDGz6b%2Bt7%2FaipE6Nrfafu2RC8sQtDxNSriILktW1hhVgUEZOfn%2Fsj%2FIKKZuEZFx78g4lMjtGX2Hur6LbTxmSliw%3D\"}]}\r\ncf-ray: a0350293af5ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-08-13T23:41:17.437933Z","times_seen":843,"resource_available":false,"data":null}},"time_used":1853,"timings":{"blocked":117,"dns":86,"connect":1,"send":0,"wait":1618,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"api.vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 11:03:00 GMT\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-17T01:08:55.174214Z","times_seen":40735,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":114,"dns":1,"connect":28,"send":0,"wait":32,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.vote-squidrouter.xyz/?req=fp","fqdn":"api.vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:02.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"POST /?req=fp HTTP/1.1\r\nHost: api.vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-squidrouter.xyz/\r\nContent-Type: application/json\r\nContent-Length: 2646\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2646,"data":"{\"payload\":\"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\",\"reserve\":false}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:04 GMT\r\ncontent-type: application/json\r\nset-cookie: PHPSESSID=339464edb2993c11c0a8644c0084effa; path=/\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.6\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEGekUNpf6ZYHp34xI2NhQtXv2DHoqyeTOXt14rnGRAVME5ssCeyzIne23Vbk3Axnz05uSAOo24P9HpJHv%2BuYCVKTi1cgdLRDRzvYvjVhq6PHgndmsAFKav8zhgKPk4vPo3b1in%2Fbd9W2FE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a035029f8caba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":588339,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e7a1a4bc5a65b07c3cef98f21820493","sha1":"7e5630d37a724c7be00775df024f7c85880059b7","sha256":"72ed7454cfd50fa003feaf1016f627f526ca5a6b33c665ea2f72aa347bef86d2","sha512":"5e422dc6605606180ec3f23e4c59ac3459e76e005b7977f684378aac59f6b8b45d2993491deeecd4dddc801f0a0bc60c373caca45ba991d77710c8619e056839","ssdeep":"12288:jVRFDX1s36tNapT7j5WTXws74htP8F5dqAK/+SjjFGK:XpmSNAL5WTXws0Xqbq3sK","tlshash":"53c423c91f949cad06b440adff991d7a3da00fef5d8cae17b1786016540fa12e88f4ad","first_seen":"2026-05-29T11:03:28.185787Z","last_seen":"2026-05-29T11:03:28.185787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"api.vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T11:02:55.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:02:55 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHO2zMv%2FJsq5KkOOrQhWt10DK9UT4t7iZhxzcEXkElbPsymNhHGDjxlCd7d4GRL7BnRimPULxU7tJzxEOIAnoNKhSie41NTJ5PbOlEA2wAK6OVSp7wy97ekrdkZDM3qcLsN9LwqyeA%3D%3D\"}]}\r\nlast-modified: Thu, 28 May 2026 15:37:23 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a0350275282776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13438648,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65370)","md5":"775b135b225978c76351fb95fa9121ed","sha1":"4a5d0bee74ae566d2056711434c4e16b721dc2ca","sha256":"8c4039baefaea256fd471b274989d05bf60685c7a58d3072f7f170a6e518ad5e","sha512":"35e688f027ef16b5179f01d449fb2966ba529362d0424a313e114afe5e410b99c42b70724a4e0c00b570d79376e917197a91d51ca6bde2aedd089f5443124cdf","ssdeep":"12288:TDi8ZtFi7wkJuH//1Uhq6q88Ozi2HPa9RlVSO2dY8Wu/KdwT3qXK7t:TDi8tFi7whHyhB8ONvaflV5YW/g7t","tlshash":"ee25d070e3d2153f6d1b41e5e049be58de94a0cbc72adedcf3aa20684fc61d46ab6344","first_seen":"2026-05-29T10:46:42.761777Z","last_seen":"2026-05-29T11:03:28.187025Z","times_seen":4,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":74,"dns":44,"connect":10,"send":0,"wait":210,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/assets/beta-buildstation.js","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:02:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET /assets/beta-buildstation.js HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPMJyjwAnDXWJwRJ5DlS%2Fop0xPuZhW8RG0OXnnprzLzILat4yPo8UG4556InPVQegInmeKlVvK76IEzeduf%2BEpD0BmhkPuTqKQ2EFyxkF%2BPYn9Y1bLRyYvP3jMTjeMJ%2Bwmvq12jBJw%3D%3D\"}]}\r\nlast-modified: Thu, 28 May 2026 15:37:20 GMT\r\ndate: Fri, 29 May 2026 11:02:55 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 1006\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"738ae4012e4a2d239f3fd0cd04aca7f2\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a03502776ac356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9381291,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e0d29233ccff3aa77871254d9977bb74","sha1":"ff62ae0cc3c90ca7a62abb39bd641fad721f20ac","sha256":"442cf38daaa4469a8e497130e25ea2e80f4e470193f08edfc741ba0f187bbd7a","sha512":"41725057f33380eca2ca3b522f57fca1378901d32b4214eaf932e9713abd2a5eeca34512502570d6c87c03e36c5e603e084c8d6e607f88fe46be1d8586cab1a7","ssdeep":"12288:eh/kr+ET5AEv+1GadAuP3J1B3USKz6ba0M7CBbwCFtAfSN:ikCETR+1GsAWbNUSKz6bU7CtwfQ","tlshash":"d6356de67360b06283a951a05837200af339e85c5c4d846df664ecff7da9d8496bbf31","first_seen":"2026-05-29T10:46:42.768499Z","last_seen":"2026-06-01T02:34:41.960665Z","times_seen":6,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-squidrouter.xyz/\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a03502935bd62efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":58,"dns":36,"connect":1,"send":0,"wait":104,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:02:55.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vote-squidrouter.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 28 May 2026 15:37:23 GMT\r\ndate: Fri, 29 May 2026 11:02:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in9SXMHPocYPSJf8SqvnfY5iA7ketzvRNxPDZ8VHdQ%2Fj%2FemZYmdMLxAnswHlc6lXhK7w1RGuOtse0QisvKVlxKnyauG10l64WIG8mfk77no3My6olyhV3J4fYAru4rM1dYHXHtsXyw%3D%3D\"}]}\r\ncf-ray: a03502776ac556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13438648,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65370)","md5":"775b135b225978c76351fb95fa9121ed","sha1":"4a5d0bee74ae566d2056711434c4e16b721dc2ca","sha256":"8c4039baefaea256fd471b274989d05bf60685c7a58d3072f7f170a6e518ad5e","sha512":"35e688f027ef16b5179f01d449fb2966ba529362d0424a313e114afe5e410b99c42b70724a4e0c00b570d79376e917197a91d51ca6bde2aedd089f5443124cdf","ssdeep":"12288:TDi8ZtFi7wkJuH//1Uhq6q88Ozi2HPa9RlVSO2dY8Wu/KdwT3qXK7t:TDi8tFi7whHyhB8ONvaflV5YW/g7t","tlshash":"ee25d070e3d2153f6d1b41e5e049be58de94a0cbc72adedcf3aa20684fc61d46ab6344","first_seen":"2026-05-29T10:46:42.761777Z","last_seen":"2026-05-29T11:03:28.187025Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":2018,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:02:55.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 28 May 2026 15:37:23 GMT\r\ndate: Fri, 29 May 2026 11:02:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3n84puz0hUdnw%2B%2FO1L4wnTuVaGbkDKdDBwofLBbrio2n%2FKI42ucMehzoXuFHVDXSx6rrwZE9X8jzPD5sRT3%2Bln9ZWD6TVAevUrEXB067U0u%2BFWSFIstTdnpRI4PvPwSrFBkF%2FwPQtw%3D%3D\"}]}\r\ncf-ray: a03502776ac656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13438648,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65370)","md5":"775b135b225978c76351fb95fa9121ed","sha1":"4a5d0bee74ae566d2056711434c4e16b721dc2ca","sha256":"8c4039baefaea256fd471b274989d05bf60685c7a58d3072f7f170a6e518ad5e","sha512":"35e688f027ef16b5179f01d449fb2966ba529362d0424a313e114afe5e410b99c42b70724a4e0c00b570d79376e917197a91d51ca6bde2aedd089f5443124cdf","ssdeep":"12288:TDi8ZtFi7wkJuH//1Uhq6q88Ozi2HPa9RlVSO2dY8Wu/KdwT3qXK7t:TDi8tFi7whHyhB8ONvaflV5YW/g7t","tlshash":"ee25d070e3d2153f6d1b41e5e049be58de94a0cbc72adedcf3aa20684fc61d46ab6344","first_seen":"2026-05-29T10:46:42.761777Z","last_seen":"2026-05-29T11:03:28.187025Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:02:56.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 28 May 2026 15:37:23 GMT\r\ndate: Fri, 29 May 2026 11:02:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPjQVC5Ju68lp%2BNI9VJDb1Oujdb0%2FthUBlLDwJXy13ai2GWHJdOhsrHzbua7sSYXIIm048SftFTqfiO7%2F0D%2FabEsInoBtNlAjZDKgWkzPmgUs4go5OqlHBR0o2WI1EYvZSiGKlMM8A%3D%3D\"}]}\r\ncf-ray: a0350279dae456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3ae8cc110b2c5997d14962fe75d56d42","sha1":"e13fed8e627a5bf306e940178e0f000b80141955","sha256":"ea2b62e93acf63ca2578bc91d5b9049f24e03c1cb4a6d26a4fd74c46cb32fc1d","sha512":"511051b58c871eb04cebccc552ee1de5846df1d55ff874a558f6cf40de3d50993dfe806acbfd9ca2df9f5f7c780fdb07e04000bf8947ba2e470d786f86d13200","ssdeep":"","tlshash":"f5c08c88eca1880a0946778fd8b0e6696e24b7501341f950fbea24b060a2a385b67a19","first_seen":"2026-05-29T10:46:42.780459Z","last_seen":"2026-05-29T11:03:28.188885Z","times_seen":4,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:00.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 00:17:13 GMT","end":"Wed, 22 Jul 2026 01:16:57 GMT"},"fingerprint":{"sha1":"45:3E:C5:5F:48:B3:35:74:79:06:9F:5E:85:3C:D2:6B:EF:4A:1A:1A","sha256":"F1:38:CB:CC:A1:8C:58:F9:30:C8:7C:35:34:D9:A0:86:E4:49:E7:E9:95:20:12:48:94:32:76:96:19:4D:00:E8"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:03:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\nage: 593\r\nlast-modified: Fri, 29 May 2026 10:53:07 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a03502932a5a56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-08-09T23:31:15.878604Z","times_seen":124,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":47,"dns":24,"connect":1,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-squidrouter.xyz/","fqdn":"vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:01.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vote-squidrouter.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 28 May 2026 15:37:23 GMT\r\ndate: Fri, 29 May 2026 11:03:01 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ah8kBrLhIAOlrkQe%2FSA243SXgfXZqefjT0Gs%2FL9XjEAVRleNzsCTnJKcQ7ws0wpcUG2mZaS3rHus99SYKRTp62nQJ9KQ9j%2FEm0Fjew%2FuYLfXWyjsFCxv2hictUimAjZQyLAoA8wlBw%3D%3D\"}]}\r\ncf-ray: a03502983d1456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13438648,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65370)","md5":"775b135b225978c76351fb95fa9121ed","sha1":"4a5d0bee74ae566d2056711434c4e16b721dc2ca","sha256":"8c4039baefaea256fd471b274989d05bf60685c7a58d3072f7f170a6e518ad5e","sha512":"35e688f027ef16b5179f01d449fb2966ba529362d0424a313e114afe5e410b99c42b70724a4e0c00b570d79376e917197a91d51ca6bde2aedd089f5443124cdf","ssdeep":"12288:TDi8ZtFi7wkJuH//1Uhq6q88Ozi2HPa9RlVSO2dY8Wu/KdwT3qXK7t:TDi8tFi7whHyhB8ONvaflV5YW/g7t","tlshash":"ee25d070e3d2153f6d1b41e5e049be58de94a0cbc72adedcf3aa20684fc61d46ab6344","first_seen":"2026-05-29T10:46:42.761777Z","last_seen":"2026-05-29T11:03:28.187025Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":1293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.vote-squidrouter.xyz/?req=fp","fqdn":"api.vote-squidrouter.xyz","domain":"vote-squidrouter.xyz","tld":"xyz"},"ip":{"addr":"104.21.12.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vote-squidrouter.xyz/","date":"2026-05-29T11:03:02.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-squidrouter.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 14:52:02 GMT","end":"Wed, 26 Aug 2026 14:52:01 GMT"},"fingerprint":{"sha1":"6E:53:D3:AA:28:A2:B2:41:9D:96:8C:22:A9:C4:D6:93:D9:68:93:DC","sha256":"57:00:7E:01:78:C9:CC:A8:8E:C0:B7:3F:73:DF:7D:24:20:94:8A:BB:18:B8:A9:DB:CA:C7:87:2C:FA:0C:9A:DE"}}},"request":{"raw":"OPTIONS /?req=fp HTTP/1.1\r\nHost: api.vote-squidrouter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://vote-squidrouter.xyz/\r\nOrigin: https://vote-squidrouter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 May 2026 11:03:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: PHPSESSID=bf1925ccbffea10f6f7c0727670a2d00; path=/\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.6\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otnJ%2F5u4jzL2vKLomdtcgnkohC%2FKW8lpkMCC%2Faf9v%2B%2F5JhmPFFCnBPFyJwpF%2BuHf4h1zTi8ALjLkVyQ2ubF3UHUNJZVcjnbnLnrStOVnUkuwJfQit4aZFLSRoB04ozuN8IZoxHDoAjHGjP4%3D\"}]}\r\ncf-ray: a035029e7ffda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T01:12:16.120648Z","times_seen":17927552,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"api.vote-squidrouter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
