{"report_id":"cd5c3d7e-0ea1-4eac-bcf7-5cf50fbd7952","version":6,"status":"done","tags":[],"date":"2026-03-15T04:53:35Z","url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"title":"Moonshot - Vote To List","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T04:53:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"moon-voting.live","ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":16,"received_data":866339,"sent_data":7303,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":5,"received_data":140350,"sent_data":2825,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dd.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":410536,"first_seen":"2023-05-11T06:58:09Z","last_seen":"2026-03-12T20:01:55.135629Z","alert_count":0,"request_count":1,"received_data":1102,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-03-12T20:01:54.257081Z","alert_count":0,"request_count":2,"received_data":2807,"sent_data":1259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":9206,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5243a6d12b61a312cadbe3f50845491","sha1":"18e161c1d68b5e46f1d95098be347ce575decd8f","sha256":"7ca654a3cb92f5703f07b7131e4398cb0cf62fdd319cd7e585f69fffaa54126f","sha512":"6c46f890053d6f0e1f7d33480367be97111529fcc6a1df9e1c0f80ae1fe65eeaac7c7f775a163537566d0264b5895eb4277d74635e43f329ff45d0d800b19ed8","ssdeep":"","tlshash":"c3c0126589b04a74851c00f6717863c4b590685d1551b4dad7bc8bc55d9cfc01f4c426","size":186,"data":"","first_seen":"2026-03-15T04:53:40.962233Z","last_seen":"2026-04-09T03:43:16.96722Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13167e631a53eb84fee7aa57dc62e20e","sha1":"29171afc76346d87340cd5343126d7172262b6d5","sha256":"53938f14d5b05b948cb9a6b27c5cf9a2962bed9d24e3f44eff212a12a1728651","sha512":"71e9e114fe8cba299427954ad1df2f6aa13194761d4d03879af07ad53c560dd1c05acfffdc55b377ceb17665fae305c0afda87397a42cd0de7bc784bed9e3c4d","ssdeep":"","tlshash":"e44141a2767708788656416d539b2b9c34311207e908e51e3e2cc2808fa6a1ef5f7bbc","size":2395,"data":"","first_seen":"2026-03-15T04:53:40.963092Z","last_seen":"2026-04-09T03:43:16.968973Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53844222d171657bd976dc97cfbe5460","sha1":"ce3e8d76a55d957e90f6601170d35cf5a0241461","sha256":"53adf4feab60b54bf2efd6cb048bf0fddb1c4f4f9bdfea0b2eeac0db6cd9ef06","sha512":"ee872643e7f9f46fef4897081ee2abe37b5c32d013dc9c45d091ca79013b1ad066d5f56ba7dfbd8fabb336a3cf9ae893be31881797b9541220beccccfe1eb20d","ssdeep":"","tlshash":"db41330cb3a7183f9097326e1bdb6104a33895137f0bec84ba8dd7506f3615486bea6c","size":2431,"data":"","first_seen":"2026-03-15T04:53:40.96399Z","last_seen":"2026-04-09T03:43:16.969809Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b066283531982822b758bdc1777400b1","sha1":"900cb80eeeb1c30157f5ecb05c5b2c604820c2c7","sha256":"2b973d0f098179442a11e0cc49a80b6fcb18fe3cb51144831ca98baf574d666f","sha512":"1012efbee7882409110c05f2bfaa5fad4cfa4b71aaa1bb1252d99a2820bf0a54642a288c4cfa1d3825c2a8fcaef9bc7abce5129be192028f8eadf989b06f66df","ssdeep":"","tlshash":"f051359b77bf1a3508db55a7338ba76a380450033a80d994ff6dd6901fa3a41d877bc8","size":2814,"data":"","first_seen":"2026-03-15T04:53:40.964842Z","last_seen":"2026-03-15T05:08:06.321335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5236775c1e6c35c277275ebfa066a3","sha1":"de30e126627bf49ffa113c225409a42ff4da8f49","sha256":"93c2056ca369e413b36e13d15b46eb7174a67e5c5e7d5ddb1e8572980a29e53b","sha512":"9e60067de77c1ab3ccaa34bd540311ed09212443d85973c93f5fbef435622dc1954a7f4fa7148ac4e413bf2788d101c6a5d851d3afa57ac379af4fb4c1d85345","ssdeep":"","tlshash":"4a519d096063d01999fb257e8beb91687531a11b21cec7303d7f91042fd631b1aaebd9","size":2973,"data":"","first_seen":"2026-03-15T04:53:40.966022Z","last_seen":"2026-04-09T03:43:16.970994Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1773550393454","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc511d393784d75a2e8bfe8708617605","sha1":"eeb9d5e0dad561962af9752408d8ec90aa830c92","sha256":"ccf3b8286a280668db972dc7b5e45255c26d0909d31fcdb58b456d238eebf306","sha512":"a2b5eedd7486d17bca2437fe45daba4c82ad37755ebb1b8f200952b5d6cec3ac97371f2ff513c7d3a6887d39fd38e3b88f0e6044b3dead2661f699d0e6fdaf40","ssdeep":"","tlshash":"e81184b6015ad4e73eb42cdc551812847d67974be7a1104fe8cc0922a4c1c662c9c7e4","size":1000,"data":"","first_seen":"2026-03-15T04:53:40.966842Z","last_seen":"2026-03-28T14:29:58.250876Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c6eb136d44417c5bd7164b480a25b03c","sha1":"5e1dfee78c06f01a7020636a28703507407d4539","sha256":"39dba981ef6f30b5fc5dca6f21f97b547922bc90b4511e46d31032ddf65d6f8f","sha512":"72608df3c467b767fe616df53d81d1f549f2302ad36a73c48567c9b90ec321b4675eab5c092adf68dfb81d2fd8482289e069e3898418398fb19492808d050954","ssdeep":"","tlshash":"6880000aa20c302302caa000208f020c00202203b222ea38ba0802a0bc8c028c023000","size":30,"data":"","first_seen":"2026-03-15T04:53:40.967845Z","last_seen":"2026-04-09T03:43:16.973659Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e05f7eaa187ca0c8eb8633aace047371","sha1":"2970c44a807c6b282f8d9b513d0f0a2d12798ec4","sha256":"399f925783101e8fb31d868e040ab659f76b915988fde33613ddb2f7aa3f6c27","sha512":"c7b37cb6808786b116c376d6b00cf2ccd6ebea8880b942d6ab1bd12998c90575b00f361933e3717c2fbb82d821bdd22ecca5db059e4588234dfa406520511b28","ssdeep":"","tlshash":"9351531635e33601019772e31fcb430a15385423b08cda9a7e6d59467feae45e6fa68c","size":2953,"data":"","first_seen":"2026-03-15T04:53:40.968735Z","last_seen":"2026-04-09T03:43:16.971831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moon-voting.live/images/community-stats.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/community-stats.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 19425\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-4be1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YHYcij%2FvcQ%2FtBIRUgf%2BhuxtR9avV4XLXLSdIypinaWwnAZ4crRaT028iGMxLsrdNO32WI0lYbOncgGRHQbyeh520lRSKhbWxZ3oxEH7EZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c60bdadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"63146951f873a9b67568099504cc68be","sha1":"e9a0c2132899923177debd49f0c6612492ccd797","sha256":"b7459ae92ee2e49cc1fd01490898980ebd8181b18c77e4e7f56decb5be135a1c","sha512":"50e6c295751abeeaf893f54e47bd295306e65b53b5c78fe454f7452a21a509c0109271d9ebdef1a926e3b032a9b62a792fd54cd99466aece27b0b90ce72827ad","ssdeep":"384:cRy1ji44MpyFWA2t8IRKZXl8RzyGQ93KaA5TGSk7KNlPsPdfbH:Q0ji/KA88dV8girfUP1r","tlshash":"3592c05f118138641dd3168738e77803569dc92172e7aef07e3a558ba49861cea0af73","first_seen":"2026-03-12T20:01:57.875085Z","last_seen":"2026-04-09T03:43:16.961954Z","times_seen":16,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 23:55:27 GMT\r\nexpires: Sun, 14 Mar 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17867\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-25T02:41:33.645653Z","times_seen":18783,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":69,"dns":1,"connect":24,"send":0,"wait":14,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/solana.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/solana.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 54288\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-d410\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNEzP1JtsKm2qE8%2FBCcnRYkVDIl%2BmFrU9z2%2B%2FnLIqNdzGF2vAeBYV8gi1cZ2XwAhdI6KWfkTLDN8N9p3%2FZKTTfHQfH3IPoJcK5WFr65eZDY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c5fbd5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8266c111cc577d34c8b477a975d270cf","sha1":"bc1e9ab97f9def650cc42cb5e74501f6e8a33068","sha256":"6c4493824008d494ec059426b79304bdee4ac9695cb596fe0f7d6e34be085d79","sha512":"af4cc76746cefc2a1157ed69cbf9144754235d427d112d00b61001edd43c3bc4f0020dce52569e5f836f5a4a3a4500630adf0b4507377ef1f589353674d36ba6","ssdeep":"768:e0ffCJ49EuBK28WHVO6kPbwGvzQrgSM1Gc3k5I5LcAaEpoCdbLsd9:VK3q6W1O6kUG9hGUQNxILsT","tlshash":"e533f1a951947eb5d281e376a06f0d508a4380fb3ce763023761fac4e7776e0493593e","first_seen":"2026-03-12T20:01:57.873053Z","last_seen":"2026-04-09T03:43:16.949453Z","times_seen":16,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 23:55:27 GMT\r\nexpires: Sun, 14 Mar 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17867\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-25T02:41:33.645653Z","times_seen":18783,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":166,"dns":1,"connect":11,"send":0,"wait":9,"receive":2,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1773550393454","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1773550393454 HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9adb9-iC6yD26Fc7+ANWW1+eVXRSSLIhM\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=K3FiHibO5ZZ4JeZ4YgY0jQ.js\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/15/2026 04:53:14\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: a619002362b0a9477626ae4b36033f5e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHyzhES4LqZO9zPQbSAWSvWB5ZZ4nhB8XblLDXYXJX2i5N%2FueKBobcIkqM%2BQHzvib%2BsiMsN%2FNYXgumSJTZjtCiliOLHsK1gQFtlR8qrK8oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc8e9c73be7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8cabc1c16dfb6b486425d7e31978cb26","sha1":"882eb20f6e8573bf803565b5f9e55745248b2213","sha256":"6e36e2a33a8f681a331046ccdc02f70ebd3c6260907c534ea69a9a276e6796b6","sha512":"a92395951eea3d9d72a09f2de75322cddc05936676736859fdf3163c85a64d976b84e5ccee1ec0c01e423b3ba5952b19f3e5d6ebea87cd495408745de5cefb5d","ssdeep":"6144:qh5gDfp6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsfpZunzvlzSWP8p0Q+Bz","tlshash":"c8d499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd098a5e379b8351e5998","first_seen":"2026-03-15T04:53:40.948532Z","last_seen":"2026-03-15T04:53:40.948532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/secureproxy?s=%2Fjmpd%2F","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:22.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moon-voting.live/\r\ncontent-type: application/json\r\nContent-Length: 1403\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1403,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB_gKwAh4ACQC5Ag4DEADgAicAAgEAJAMAAO8nhn2XtsKCARsq-2pBHCzL7KXMwmcCAAAe_hx7dcr8aJJz13tfFVWF5ngiKMDlH8IDlNnqB6e8Pm44T8gcDX06acj2GNgbnL7QPs86W4657UN8NAaVPfBvAY6zMALqo7xMLATz4srHk7NYHDCoppZdjJaV5slPSQQ90f398cJspHg6Qg7mmAFweXaYvVJJKcgMR3fdgNkiKzj2PhIxRH8grqo8FPXv6uCXtf1W0BgF8qQDaD9Qp1A4tgxUYjJ0rsCIA4axzQndZxrie4LyqzpyC8daUomRc4z4Z3Z4-mYx9CQyhJ6UGEtXisfZl4qqbmrME7IffD092rAYqYj-Mr7zWSHhCAwQ5mjwAAnIjVEoBuP3J9sHiuOVKJw9Ysj4V8U-KRKbPXBV2_fEWpmgIuwxr9jSfulX5eEgkQFaxPuvGIcURLaHvnDOXM7xLRPIFckcHR9mhXMYUEbgxsvOhkki2n7NNoXSAlzBx5Srs-rK5BEC3Bqj2in6MNy7DUWhO4Ak8f8K7zXtGM8pC-5rs3QijMrGw5czmSA_hCuu2SAlmDdAEudS9x64iv-0KbsQjbzAHmtKKXxeCX_IcdvaFdV1Uy9N3urg_TyJ76zzINdIOA6_WmhumJYy5KsVlNxs0jQkM-ejHlwQpT4mkWL63CdQlDU7PhWe1Pzc7yMdtXMW3F8C8q0wW5-ZlRvkQracpWAKoSNt2BvGj00I300sOqgHbmtYfw9AxKU-rD_crvJmwJ5gzkmKysp6WGXz4bv53-HfjuTAmJib1HVNonRQfku6r7YD0mhVXsrVurugFbFoZvC9hFbaSG73-7GNvheCZodCwFk3gG0YLJC5oQpO2edXm4NTD5wmo2erMNvCZ9jhqwrRvSQ0lMI-_1Bj4wS0wvT2_jLkZEeKFw2RZ0XMogejK5HtDG5D4eXRexErq_t0WX8CfShGzw6OU2U0kZ-yfuR0PNAByj9s-ScazY3ebBmDhXCazE2w-mWupzaXokT0I0ZxqLJvlrgfbvq7RAo_n4cPUIHTNRmutRjAwLWWcE__851YR9svSwh0-UwbVdJ5MK0aMmKycnt8YbRMVOeU05tevuJiu4gQI5AvVnTEGOWCZ_CIodj7wiQikqHW4vA4kclRpRA\",\"challenge\":\"eyJpZCI6ImhvZU5YMVQtTlV0LWNrYk9laGJjZWciLCJub25jZSI6MTQ1LCJoYXNoIjoiMDA5MjVkYzVlMWI1MzU1YjBhZmIwMTE1Zjg4ZTU2OTMxMzVkOTY0ODhkZmMwNTYyNTVjNzBkYjBlNmVkMWI3YSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:23 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9997\r\nx-ratelimit-reset: 1773550462809\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/15/2026 04:53:23\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 0d7ee57e8f0a64e70cb14b0f3b748352\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0LDmLNOX30Z61L%2FwsDDhkveowtZ5J5KlzMnbH%2FXbNJxnCM4g1j6sst1GcacPu2uROt4MId2T7F6Yv4W7fjHTtKYYJp1utkgBWSM%2Fbb5tWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc8ea0108cfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":737,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T04:53:12.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LBuAbdIxrMG%2BpADf64ZfpYtwzs87iVKUNxMWHF4zdVwoJYVQjNb6AVi8NzPFopE3kdNClouy0AdHZH%2FTScSOtxqc1fLJEiHV9cDe3ZLonc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dc8e9c35c9e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64320,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (353)","md5":"e5a61653c97f63f790f6b473d2198911","sha1":"593cab0adbbfbe3d87fe4a3a35b0a787741540dc","sha256":"44faad7a59a6b787570bd6479d16a373b82f7405c200d8a4f4bf1a0491b919ba","sha512":"4988647c5bd76899052d9bcc99e5db62a09c36d40b64104ade30b246845009c21a8bfae33c1a9270f9f6e33651e6bb4c931b45668a9d7be1fa7ecdd22afdd9b4","ssdeep":"1536:l+nUub6CmnIIcmqM+Tv4srqXh23fBUJ4cukCD:Yz8Pt4cW","tlshash":"4a53d82162b3112a606391557bd7970e3174d003e20ade6c7eed5184cfceadad6fb788","first_seen":"2026-03-15T04:53:40.949976Z","last_seen":"2026-03-18T15:46:15.108205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":71,"dns":62,"connect":1,"send":0,"wait":219,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/pp3.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/pp3.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 230\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsKBOlLrPDIxgY0G%2FgHGNozXH%2B95FXvI1ZZ1bpcAUccyir50oAOaf%2BkkT4kQdrpw5L0NpqFgHiwTmHf4nxDseIX8muWdAALHiuFD9khUa8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbcc2ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"6522f957d24b2cfa6c81869245cd29ce","sha1":"20c7f045372c033478e64a9a4d105ba8d9e87aeb","sha256":"d2a96483eda92d3f316786c64f6e01e18567cae636015d23b9ff563ed973df12","sha512":"d2f326d1f7c7809ad6fa6448929bbff911774eb9e46e306cf52efef8fe74e229cdd03b7b2fe2ccffaa6efb1ef8b9c4e37eb413809bee95e3c218f9444809cd54","ssdeep":"","tlshash":"f4d023d583f51d78f0055c3785434de05de3245c2507d0439e23c5db75655039847746","first_seen":"2026-03-12T20:01:57.872225Z","last_seen":"2026-04-09T03:43:16.963907Z","times_seen":16,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/recent-voters.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/recent-voters.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 6559\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-199f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9axvXLzEOqs6pHBSdICU7gtQZTuvGD1Dd5lcfBWzl3ImVe0GTpWPap2SiyVpyFdG3AD%2BuGTy0QaEHIntyTIyhwlQGHBlQ5YomFd%2F%2Frh7zc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c5fbd8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"12f27427d1b59fe77ec6518624eab6e1","sha1":"a34eead70b200c6053204a9e64d5afb9767ea132","sha256":"b234fafc55cd3e46072c0a56ea37c77db94c055e8f5ba140851b327bdc2b8de9","sha512":"29c549d75684bd84eaf2d6cf7e13c68779d7efe4ecd9112841ae6381a98fe3be6e0eb24cd0818f0f733bea963b3ec870dff41cd595428301f44022fed0967436","ssdeep":"96:VAkXQsIf5GU6Pul3WBVGQ+QsSIgnrOLRRzNWubXCsRYwyrMfPhHeaAV9TH9gzv:ikAFf5V6mlmBVGUrOLRlyVjT/kv","tlshash":"51d1af81293dbf4d04ce5529543b4b39407c15ce32964d81b88ce85aaeeec240ebe345","first_seen":"2026-03-12T20:01:57.86683Z","last_seen":"2026-04-09T03:43:16.952979Z","times_seen":16,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/trophy.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/trophy.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 34425\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-8679\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmiV648iPkMtV76X4qSoahsGZIbmRonQEaCuO5rX1X2Q6fmeIxJlCMHIE3dfineMULnFM7Cxa%2B%2FeYHlVpTptCaWBmHOIM0KiifvoKqdV9C0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c5fbd9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 4-bit colormap, non-interlaced","md5":"c77547314c4e0fca4fbab05e44709317","sha1":"f549d875f9539f17c6b05056161bfc808aa893e2","sha256":"643e182848be93edd7a1911e6176b43e4a4525edcf273c927ba43e2922040ea5","sha512":"d2812661f1bd39c9b2d5802a97834321026cc4eef469e8a563151f445ece18c1ba1481c0043554826d6089ceba7de3da0f2be17dd20460bee902e6589e17964b","ssdeep":"768:jW/dM2VDilAjFnEEsrdp5K8vOOZY61GwUw6:UCblAVEnrdp5K8FGwG","tlshash":"d5f2f1b32ab38c15c54ce734736f335a1e6619867eb7a51e8b618b005ec7300fa97da4","first_seen":"2026-03-12T20:01:57.867741Z","last_seen":"2026-04-09T03:43:16.956296Z","times_seen":16,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/pp5.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/pp5.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJ3f7icmYVqQUviLt%2BcqYlUW%2B%2B60d2swMR70P9aap197oHHO%2FOkW8TyPSXVll1%2FYwxx7IEQmXyjwbHEstumLxl2WLUZ82lo61QDV9oBYQlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbcc2fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fef3048ead40a2f2cc34139c1af582a8","sha1":"48ac35065c2804f6538a5af8950b9b734786b057","sha256":"c04deac036ed48dbf9e85c23c140e587a4ffd271e797d0c6b8ae218a7c5138bc","sha512":"b7bb75dab9186b009158e9aac07cf266ef309e3e3dfccbbba9e0ef362c06168cea77d60d9995d4062ee03e16f41be6effcf6b52af1c4c4573d17c8e0c79de566","ssdeep":"","tlshash":"02d022c2716facedc8668073922b171bfc3302195218cb8a2b32c5685c7d90df08b183","first_seen":"2026-03-12T20:01:57.864716Z","last_seen":"2026-04-09T03:43:16.96453Z","times_seen":16,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dd.dexscreener.com/ds-data/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb","fqdn":"dd.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /ds-data/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb HTTP/1.1\r\nHost: dd.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://cdn.dexscreener.com/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb\r\ncache-control: max-age=3600\r\nexpires: Sun, 15 Mar 2026 05:53:13 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9dc8e9c63da6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":30,"dns":20,"connect":1,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moon-voting.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-length: 0\r\nlocation: https://cdn.dexscreener.com/cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp\r\ncf-ray: 9dc8e9c68e4c4c11-OSL\r\ncache-control: public, max-age=600\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=r6TzTofnp_727YwOdo8L5MTcq8WxcscNhtsG2uO9Sc0-1773550393-1.0.1.1-rb8cr7slEe8P7WeNKHoQJgvZtJgTHGdAFoRHBXMOckFPKS.nhUPzL9lL801wcRkqcSRnez0SEma4Ir0dMqndYhIOyKiFGEMHtTdAHF8F99ossjHvhcaRsaQSckSE0sVH; path=/; expires=Sun, 15-Mar-26 05:23:13 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/pp4.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/pp4.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 226\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfFWBSPcDPubk03qP%2FNtwy995qK2kPJ%2B%2FizoHTnQRXkvrxqzK1r46dKBh6xDWTW6d472UoyqijEQ5Zdu5XEcw626xypHJ8NnSPtdxiQoq74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbcc2edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"4f3e70a33a5dd8c2a15038013f74de01","sha1":"d84bb581e48ad3201604eee41410b863f0477245","sha256":"2e57ec9e2b5d11cb3e8b11df46a2b1f480a94420304548d8d6c82b227f669427","sha512":"e24187695bc2a3b8f4bc1492baf9a0c73f948d5f7f864278d00f50f7e129e5e12341fb09276284b0e1cfd709fccbc82376e944269483df4c8c62b1ec43b2bf0e","ssdeep":"","tlshash":"36d022e3c281ccb8ca040932971e2202cda402384b81ce139e24c82e1fda2088461706","first_seen":"2026-03-12T20:01:57.87068Z","last_seen":"2026-04-09T03:43:16.950093Z","times_seen":16,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moon-voting.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=r6TzTofnp_727YwOdo8L5MTcq8WxcscNhtsG2uO9Sc0-1773550393-1.0.1.1-rb8cr7slEe8P7WeNKHoQJgvZtJgTHGdAFoRHBXMOckFPKS.nhUPzL9lL801wcRkqcSRnez0SEma4Ir0dMqndYhIOyKiFGEMHtTdAHF8F99ossjHvhcaRsaQSckSE0sVH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 15 Mar 2026 04:53:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 682\r\nserver: cloudflare\r\ncf-ray: 9dc8e9d01f3b4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\netag: \"cfjvNnJSibIYcOE9QprnBJtq6arNqw_6efRIGQ7cyLDQ:9d46ce6f6ba23c4c40cc0d0741fddcb4\"\r\nlast-modified: Tue, 23 Sep 2025 04:29:48 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=28+3 c=0+2 v=2026.3.0 l=682 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fab68cabbd965e3da10d04264f05246","sha1":"2c2021ddadb8a16121bf5c6ef1c8d39a97ba5764","sha256":"7c7993e7e1104c18ce80051335cea53cb84b41403368c54234b50d8e7ddc4e2d","sha512":"a6d55b000dde6349738299a3bda5e2f440ad180789e0cf38f5f1f2cf46cbf23b14f6669fb2d18b14bf0a43403b35c53937a3e02ad4df6f19ca1d750d21c960c5","ssdeep":"","tlshash":"c8018313d7261e88cefeb8c2a48739d2161a6976c4618c0cf6312eca995d2752037557","first_seen":"2026-03-12T20:01:57.863145Z","last_seen":"2026-04-09T03:43:16.962522Z","times_seen":16,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/moonshot-light.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/moonshot-light.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 22786\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-5902\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlfaBzmxfzOZFlnr1XCUafq9OjxK587qnvBkZi%2BFpbDxtk73Gp8aqosHXTdSYLePd619dGot38Ze1axRhTiPNw2G0wGVk%2B0B0DDPzA4g2cw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c5fbd4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 249, 4-bit colormap, non-interlaced","md5":"a57078145660124821289869bdf6652f","sha1":"b9defdd0f46b30880bcb03016fcbc12b4f3e51e3","sha256":"b7c6c522842070b66d17633a8843a1cebc0a436190d73da735c60a1c20e3e316","sha512":"db7698d06b0eddf32d70a292d91651e10e47419008b11354d620e241e9828ca6a35427f3b335c11c6645649927d45a20710099d16b0caf88bce9bcb174a8aa09","ssdeep":"384:bc3upUife9g8bwidhz8JR3aTbMebfq1ptJoxuo6kBDFQ5tyqgdEvuRGQhdTTkb8F:IIU8e9gov8j32bpmfI1dBD4tyqg1PdT9","tlshash":"05a2d0bb9b742063f6b905b3d9eab5e1725357da1400fda1df428a7c12d819065303e9","first_seen":"2026-03-12T20:01:57.868587Z","last_seen":"2026-04-09T03:43:16.960852Z","times_seen":16,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/pp2.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/pp2.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 229\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQiK8aswYZPSPrcZUZ%2BwryP%2FbQ69nww1s3Qq3HPXXH6qWocrtL5JffohVvRtIMDzIC2IgSN%2BzQlv6kVQTBmd7AAJ5kHCvXOSIN45j1hEpSY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbcc2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"f7777816e540bd742bc4c5c754af4b81","sha1":"4e7d9541011db8f7c55cd525176ee049125d0db6","sha256":"8151ca4566b4390de0e1030324796b23c358349cbe298a8e1413c2975c9f84a3","sha512":"4465069f120900b3bed8d909969bd5a18fdd6282fe1deeb6549868339a0b828f2ff6201480df5a73b31920d4ac00062802f0392e63fc93e6befce5e4f9cbe5d1","ssdeep":"","tlshash":"24d0228d320f4dadc9841373514e1a32b7a143082e38c642ae2fc1bf0da622cd08024a","first_seen":"2026-03-12T20:01:57.863957Z","last_seen":"2026-04-09T03:43:16.960073Z","times_seen":16,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 23:55:27 GMT\r\nexpires: Sun, 14 Mar 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17867\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-25T02:41:33.645653Z","times_seen":18783,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":92,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 23:55:27 GMT\r\nexpires: Sun, 14 Mar 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17867\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-25T02:41:33.645653Z","times_seen":18783,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":174,"dns":5,"connect":8,"send":0,"wait":10,"receive":2,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moon-voting.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 23:55:27 GMT\r\nexpires: Sun, 14 Mar 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 17867\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-25T02:41:33.645653Z","times_seen":18783,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":68,"dns":0,"connect":23,"send":0,"wait":11,"receive":3,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/pp1.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/pp1.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 234\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NosfJA6yl8%2BcUbQpbTkEcZuzZoyD3eS%2FZHy%2B05iH7Va%2FjBugIngPdwdXXI0gg3usQaGtwVj5amVwfeeWYp9b5FOybBA8SS4YjRJE688Kh3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbcc2bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"dec36b4b14c8823c9107c462123dfa9e","sha1":"94e7d99ebd01757cad34a83f468d7138ed83b677","sha256":"159bcc0389e6adcafe0128d09d937fd09071bc9a8956260ab5d6b7e4f1bdb0d8","sha512":"c44ee32ad89c0b2d65fed6cd96942e3ad6b81f4f70f11615d87ff0c6656cb4af9524798b8d4a086246c664a422f10bf36a272166c5d9d23f62858a35664a37a7","ssdeep":"","tlshash":"e8d023f743120cedc588c232f54a8b557f23524816249a4b570bc86d6db0784dc45248","first_seen":"2026-03-12T20:01:57.869902Z","last_seen":"2026-04-09T03:43:16.947678Z","times_seen":16,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/question.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/question.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7481\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-1d39\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA%2BSXyY7q3NNWZulAF%2BCky%2FX2fnq%2Bszj%2FPslxIhXS1xn%2B%2FhudpX76huph4jFoX6v2gUJwW6QpKm3hB4i0BEXE81MMtG%2FXHdn05y4r8xNelA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9cbfc31dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit colormap, non-interlaced","md5":"ab5f8e153fb1c1be0fb94d30a2b19cb4","sha1":"218c15016d156105d1b1a270068244e611d93bfc","sha256":"384163e9bddc239eab427d4d7fa70d667a4824dfdedbfc6188f3a08d332d6f50","sha512":"03115a76256f76059e21ae9c43e7f92076ef1deedd5422f04f953aa4bb4cd09f147612c429bf85ddadf4cced29b9f572e2a70e3fbdd822cc8457fb911b33900e","ssdeep":"192:4Z+ZZZZZZZZZZZZZZZZqZZZZmCZZZZZSZZZZZZZaZZZZCZZZZZZZZZZZZZZZZZZF:V/E5yvWNRveOslFeexsBu","tlshash":"d4f17c3604ed2810c76749d6fdad7cb6df9bc27817a6c1aa84728404ddb4b8811376e7","first_seen":"2026-03-12T20:01:57.865879Z","last_seen":"2026-04-09T03:43:16.963213Z","times_seen":16,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/favicon.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:14.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1874\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-752\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FSMb2TiPnDuEjEHbuozkoe2VogOSyxuY8S%2Fey5dNo6wsihZ66xtl96U41fdorREIkYrB%2F7mIK0sJxK2Nm0gscKrLYTlB55iKghwRqai11c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9dc8e9ce1c54dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b10d57b17063c073a8f99abb4c42ab41","sha1":"a709f70144801d6b2abcc1f010b446d9aca6d319","sha256":"8aac0ec55d70d8dc9a3b3cf67d203326eb35898f8410498189b3de895ba7900d","sha512":"e50c01695e3ccce487b16559e12299d3f1751bfd4e3bc1ed5d6ca19d96159d45205e6bab4ae7a6477dddd47517e3af56a2f9ce8ebfdc967f4ee1e9856d48c9cb","ssdeep":"","tlshash":"ea313bb73a0352f3298287e6ae74a85d94b69d3583f0688cf038895d75acc31425720b","first_seen":"2026-03-12T20:01:57.860442Z","last_seen":"2026-04-09T03:43:16.95159Z","times_seen":16,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 04:53:13 GMT\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-07-24T23:03:19.670942Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":93,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moon-voting.live/images/search.png","fqdn":"moon-voting.live","domain":"moon-voting.live","tld":"live"},"ip":{"addr":"172.67.146.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moon-voting.live/","date":"2026-03-15T04:53:13.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moon-voting.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 23:48:01 GMT","end":"Tue, 09 Jun 2026 23:48:00 GMT"},"fingerprint":{"sha1":"7B:32:DE:16:FD:49:E8:15:03:11:97:57:CE:14:1A:BC:CF:D0:A4:95","sha256":"6C:B6:D2:31:8B:FB:CC:E1:89:A7:0F:0B:98:BC:4C:4E:B4:0D:52:D4:7E:0B:D8:DC:66:37:3C:86:C4:F8:90:49"}}},"request":{"raw":"GET /images/search.png HTTP/1.1\r\nHost: moon-voting.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moon-voting.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 04:53:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 4172\r\ncast-mode: default\r\nlast-modified: Thu, 12 Mar 2026 00:32:05 GMT\r\netag: \"69b20985-104c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTeD0mXf8Ed1jHFmb%2BbEc7XklCHXsDyHiAkl7cHxctx7so6umuWc8c0jsCDX3y42XUiWmjjNFEEQxbMSiUWOYwGmIQhIL9OqGIpNHjJkFKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc8e9c5fbd6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7e00f13f299c9623e23b6400c04d4032","sha1":"d123d663a9a5a44038f4e59cdec42a94d3c43381","sha256":"0a4cc6954bfd18d344fc60dbd0dd74df8efc0569923a93393ecbc8b707c7b728","sha512":"a53811d7c31d9a0d842b5309e8e761cb60ab0e746b03f64c958bf7ab54a996216c18bf82d445f19ec64599fa23dfe73ba19273f567971775c60d1ce54cc9fc58","ssdeep":"96:d+z2itx0o4MhJyhkY4q3tJWwiM7yrS0bWVyuiMBh2:0yYqo4M/yeYDv/VK","tlshash":"3f816dfb0637c61bd7c6889b8ed34a0cdd2c483044741dc5aae9549fe6e011b13b954d","first_seen":"2026-03-12T20:01:57.874086Z","last_seen":"2026-04-09T03:43:16.959091Z","times_seen":16,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"moon-voting.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}