{"report_id":"d8039fa5-bd40-452c-b0e1-dbffc3b378b2","version":6,"status":"done","tags":[],"date":"2026-04-09T03:42:38Z","url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"172.67.219.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"title":"Moonshot - Vote To List","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"172.67.219.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T03:42:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"dd.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":410536,"first_seen":"2023-05-11T06:58:09Z","last_seen":"2026-04-06T13:44:08.338493Z","alert_count":0,"request_count":1,"received_data":1293,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-04-06T13:44:08.311628Z","alert_count":0,"request_count":2,"received_data":3168,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":9206,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apps.moonvotecoins.top","ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-29","domain_rank":0,"first_seen":"2026-04-09T03:42:39.539865Z","last_seen":"2026-04-09T03:42:39.539865Z","alert_count":19,"request_count":19,"received_data":4462057,"sent_data":8921,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":5,"received_data":140355,"sent_data":2855,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5243a6d12b61a312cadbe3f50845491","sha1":"18e161c1d68b5e46f1d95098be347ce575decd8f","sha256":"7ca654a3cb92f5703f07b7131e4398cb0cf62fdd319cd7e585f69fffaa54126f","sha512":"6c46f890053d6f0e1f7d33480367be97111529fcc6a1df9e1c0f80ae1fe65eeaac7c7f775a163537566d0264b5895eb4277d74635e43f329ff45d0d800b19ed8","ssdeep":"","tlshash":"c3c0126589b04a74851c00f6717863c4b590685d1551b4dad7bc8bc55d9cfc01f4c426","size":186,"data":"","first_seen":"2026-03-15T04:53:40.962233Z","last_seen":"2026-04-09T03:43:16.96722Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b08255507ad5986e79fa37ef64e06cf6","sha1":"d2b275879df699642ba1a5d06dd9f0315f9988e9","sha256":"89314ec8f6cdfdfbe5513f916e95f5467a0e02a671574e7f58205b430519241d","sha512":"40fbc5605e4a791a56ed3efd671eea7d559e0a5efa76ff6d5d6eceefa66c434e97ef40fc6a131ee511e9cc36ce52a270e26e95a1f8d0b94b782874388c0330d9","ssdeep":"","tlshash":"8a01909477fc27202e7b237f47477bbc3a214800109e65fd54d1838052a3a5a7d279ed","size":733,"data":"","first_seen":"2026-03-28T14:28:38.875567Z","last_seen":"2026-04-09T03:43:16.968006Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1775706136526","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"652e805addeea8b9bf86a065a14047e2","sha1":"3879468e0fb658252b41efd17da69b5d8a43c5f8","sha256":"7de8efa5ecda57dce70ce1cbf9cd6d70d9d6c89be6b411763401d19a7710e8ff","sha512":"208841e21d423fc53a6f79e8559de07e8e086cbbf17c22afceb6db6bea51a7daa8f139f06f753f71c2a7f286d30b1d023c947f77652ae4578793d72c69b3ea63","ssdeep":"6144:Ih5gDOAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osOAnXwRTMP8chPc730WW","tlshash":"28d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622863,"data":"","first_seen":"2026-04-09T03:42:43.710988Z","last_seen":"2026-04-09T03:42:43.710988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13167e631a53eb84fee7aa57dc62e20e","sha1":"29171afc76346d87340cd5343126d7172262b6d5","sha256":"53938f14d5b05b948cb9a6b27c5cf9a2962bed9d24e3f44eff212a12a1728651","sha512":"71e9e114fe8cba299427954ad1df2f6aa13194761d4d03879af07ad53c560dd1c05acfffdc55b377ceb17665fae305c0afda87397a42cd0de7bc784bed9e3c4d","ssdeep":"","tlshash":"e44141a2767708788656416d539b2b9c34311207e908e51e3e2cc2808fa6a1ef5f7bbc","size":2395,"data":"","first_seen":"2026-03-15T04:53:40.963092Z","last_seen":"2026-04-09T03:43:16.968973Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"apps.moonvotecoins.top/secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1775706136526","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FzMiPRxI0Il4osNctoHqI8g9de8dd891b5c6bcd6c8144e1a45f0adc%3Ft%3D1775706136526 HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9810f-OHlGjg+2WCUrQe/RfaabXYpDxfg\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=1x44WPI309-yFJSAQqFe6w.js\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/09/2026 03:42:17\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: cc2e0860f7ebc8855be08c297f2748b7\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHHNfKdQkCgphWjZ7GmZDRbTx3IpAukkvJn4TJ4345tzr%2BuHdjZmyiRzGGuFOUfOjhDoyzHeeZkjcVX01RhXtxrIjyWBaTUUod9%2F7isV6CG1k2c%2F4ObZEIEwyhKkaMKc2h2Zo6FBxiZ4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9680396c5356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622863,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"652e805addeea8b9bf86a065a14047e2","sha1":"3879468e0fb658252b41efd17da69b5d8a43c5f8","sha256":"7de8efa5ecda57dce70ce1cbf9cd6d70d9d6c89be6b411763401d19a7710e8ff","sha512":"208841e21d423fc53a6f79e8559de07e8e086cbbf17c22afceb6db6bea51a7daa8f139f06f753f71c2a7f286d30b1d023c947f77652ae4578793d72c69b3ea63","ssdeep":"6144:Ih5gDOAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osOAnXwRTMP8chPc730WW","tlshash":"28d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-09T03:42:43.710988Z","last_seen":"2026-04-09T03:42:43.710988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":681,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:48:28 GMT\r\nexpires: Fri, 02 Apr 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600829\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-09T09:27:29.235914Z","times_seen":8010,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":181,"dns":1,"connect":28,"send":0,"wait":15,"receive":5,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/pp5.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/pp5.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdqDB9hzmWhXdkalOEyr2QbPwkqh09CKVO10cZ5uQdGh6rl9T%2Fwhc9QxorxWwCMIx3sq6f8dKj7W1F5TdPiyZNI7Yfx6LK7aPfgXQkrUbHdrOmyiXiMTQDtRs%2FrQlYfVUULNAd47CHKJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e968040fc7d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fef3048ead40a2f2cc34139c1af582a8","sha1":"48ac35065c2804f6538a5af8950b9b734786b057","sha256":"c04deac036ed48dbf9e85c23c140e587a4ffd271e797d0c6b8ae218a7c5138bc","sha512":"b7bb75dab9186b009158e9aac07cf266ef309e3e3dfccbbba9e0ef362c06168cea77d60d9995d4062ee03e16f41be6effcf6b52af1c4c4573d17c8e0c79de566","ssdeep":"","tlshash":"02d022c2716facedc8668073922b171bfc3302195218cb8a2b32c5685c7d90df08b183","first_seen":"2026-03-12T20:01:57.864716Z","last_seen":"2026-04-09T03:43:16.96453Z","times_seen":16,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/ethereum.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/ethereum.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2984\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-ba8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2RBzclcA0UZKdlFi1oxRkoHk4hilPd4zcDL89nECjH7ZuMgxgGzkyAGvRn%2BB0kr5kLHl8DThl1%2FFACvQho8jVjwqh7%2Bt1VO8wep1k2Cc1PoEcKMXawx8X5gWmO0OlhnQWfsomtNv4hg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-04-09T08:11:50.125983Z","times_seen":488,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:48:28 GMT\r\nexpires: Fri, 02 Apr 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600829\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-09T09:27:29.235914Z","times_seen":8010,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd.dexscreener.com/ds-data/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb","fqdn":"dd.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /ds-data/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb HTTP/1.1\r\nHost: dd.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-length: 0\r\nlocation: https://cdn.dexscreener.com/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb\r\nset-cookie: __cf_bm=Xf62QCUYZaB2VUFZQvj13hXypYCC1oA4sKqyJGJKqTk-1775706136.3545086-1.0.1.1-yy0QzeMedqOrz81MUj4eFZpAXL8qnW9EKdvA1H2w6Rrt0FN7CEyklWR4EYS6XUNhSkyEh9ilMGB8l08PZ46GAmPBCujg7Znt4v5j7NQmz7gBIznILPzF2ZmVoSSFTaVA; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Thu, 09 Apr 2026 04:12:16 GMT\r\nserver: cloudflare\r\ncf-ray: 9e9680383f0eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T09:28:02.4502Z","times_seen":13534720,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":12,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /tokens/solana/BKCKokfjBsxtm7FDUDQHKpZ8VeLt3wJcT9t5jXgMpump.png?key=29abfb HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apps.moonvotecoins.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-length: 0\r\nlocation: https://cdn.dexscreener.com/cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp\r\ncache-control: public, max-age=600\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=eIvk0sGJvnVwTmddnmALcjP4UMllf4sYgyhg5rR.PRc-1775706136.385465-1.0.1.1-TEsbTVliR9gIw0EOEuaw4wkq3jLo7vpTaQ9BytlUwvQZRygVyKnVTkQpyd1KA.ldMA3xo2Bs9yP_QofjdDGaSaScmwwdGJ6QZ_PSk0wgeMjxIGYjCzRQUTEGryIH8uu3WKt9j.twaxtHQ9A4kmWzSA; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Thu, 09 Apr 2026 04:12:16 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e9680386a8435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T09:28:02.4502Z","times_seen":13534720,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/pp1.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/pp1.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 234\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAoLa09sO0FSP73r2NBtQV6ZwHfmFrMWghWd3ZDo5fmlXgOqiPMZRgg3QLn64BKZMRGS8YQfsEBJwLvICvaLa%2F0800MKVZ3dnRH5E5rnpdnYcxOrD%2FKt3tWTpO8Kr1cxp5ogKQh1Ne8b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e968040fc7956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"dec36b4b14c8823c9107c462123dfa9e","sha1":"94e7d99ebd01757cad34a83f468d7138ed83b677","sha256":"159bcc0389e6adcafe0128d09d937fd09071bc9a8956260ab5d6b7e4f1bdb0d8","sha512":"c44ee32ad89c0b2d65fed6cd96942e3ad6b81f4f70f11615d87ff0c6656cb4af9524798b8d4a086246c664a422f10bf36a272166c5d9d23f62858a35664a37a7","ssdeep":"","tlshash":"e8d023f743120cedc588c232f54a8b557f23524816249a4b570bc86d6db0784dc45248","first_seen":"2026-03-12T20:01:57.869902Z","last_seen":"2026-04-09T03:43:16.947678Z","times_seen":16,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-09T03:42:15.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8GxJCqRFeZ8EcNyCX48z5i6cHq99xb8cxhB5tJg7WBnWTH33YMnPNHYzcaLJWpi1UgkzsewZr%2F0ZZ%2BKlTyVNkGVsSzhNWDYCxjNCRwhs2rj%2FW5Z%2B0RcwNOD5yhcSzKikUPYPhdJi%2FF0\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e96803599ee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67297,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (353)","md5":"d64616be409084bfbcc7ae9584c02fbc","sha1":"f1e71833673a1afdace5939e31d99a361167ebf0","sha256":"3f6beff193823a987216c1520e8ec5c6d39536174c27e14c74936be2c88495fe","sha512":"d691a0ba01a9ce968ad6f663983a40df0dca6b70af1a5c31e3f9889d0e9c43350df3344146b1bccc5f49d71bfa2a37e1599a36a424d7474ebccbfedb6872cde7","ssdeep":"1536:dmnUub6CmnIIcmq8y+Tv4srqXh23fBUJ4fspkCD:Iz82Pt4fst","tlshash":"5a63d82162b3112a606391557bd7970e3274d103e20ace6c7eed5184cfceadad6fb788","first_seen":"2026-03-29T15:41:17.354247Z","last_seen":"2026-04-09T03:43:16.958291Z","times_seen":4,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":64,"dns":55,"connect":1,"send":0,"wait":232,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 09 Apr 2026 03:42:16 GMT\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-04-09T05:18:55.05064Z","times_seen":467,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":95,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/fade-2.7.6.js","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /fade-2.7.6.js HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: W/\"69cf4857-446f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BUCRmAjiVRYKNYFlXhCBmwl0s03038Dlis1gII1Tk7hrbxuQhJGX8A97jUhK2BEGnLdzYdEQMHnzJTKGASvmrDEpgVrj8LEwDXXmknkhHxtlA501EwxpqK%2FvKQXoIwkns3fOX%2B8hX1n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e9680380c4656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280308,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4775100b944bde9a4d2c10d23f97a98b","sha1":"2011a57537032f1fd7c3911cb82ef6cb60949bec","sha256":"5b3871a62649ba9b49ba94ce79910fe0cc29a11927f09ea172f80d0b3031f71c","sha512":"3a17f02fb52b1acdc00c08bbdd7fac233b805f148b1695f9f748cbc9cd6174d63da34be7d54dff9008e1850aaa468b49668808b37e3253687dd1d456a33ccbda","ssdeep":"1536:HTHHcEJOeLuFt1UPke2bh/OeLuFt1UPke2bpp3KvvnL53r21tsqwt:7HD6ukes6ukeCkvn1r2gqq","tlshash":"b55432da5a5691e5bd12018ecc72ed08d4184d63bdacf093baedfdc5742af21844b32b","first_seen":"2026-03-19T16:31:13.250451Z","last_seen":"2026-04-09T03:43:16.948906Z","times_seen":11,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/search.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/search.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4172\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-104c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYZxD3tVpkZnA6UnZjZb7RksOELArlmmaEgCeecfI4788WUcDBNuhiBL4kogK3AOQ9fxfeiQXyeiBVbWVXsH5YszH7sAmLM66YXH0Jp89q3JxhZlLqHF4e8qQ3ysXjF7EYQBu9sd2tA5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7e00f13f299c9623e23b6400c04d4032","sha1":"d123d663a9a5a44038f4e59cdec42a94d3c43381","sha256":"0a4cc6954bfd18d344fc60dbd0dd74df8efc0569923a93393ecbc8b707c7b728","sha512":"a53811d7c31d9a0d842b5309e8e761cb60ab0e746b03f64c958bf7ab54a996216c18bf82d445f19ec64599fa23dfe73ba19273f567971775c60d1ce54cc9fc58","ssdeep":"96:d+z2itx0o4MhJyhkY4q3tJWwiM7yrS0bWVyuiMBh2:0yYqo4M/yeYDv/VK","tlshash":"3f816dfb0637c61bd7c6889b8ed34a0cdd2c483044741dc5aae9549fe6e011b13b954d","first_seen":"2026-03-12T20:01:57.874086Z","last_seen":"2026-04-09T03:43:16.959091Z","times_seen":16,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:48:28 GMT\r\nexpires: Fri, 02 Apr 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600829\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-09T09:27:29.235914Z","times_seen":8010,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":109,"dns":4,"connect":15,"send":0,"wait":16,"receive":15,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/favicon.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:18.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1874\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-752\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FTuYwjORXNVtEqkgh9mjuU0EZBiubks46LOo1ygSTP%2BJ8EcVUO5lwSRc5uZtH%2BgRmHWVmfrdFTvaKM%2FMkjK7LP%2F6rdJ8jEjYrAN1T3g8THIgTIzWvM5KYwYDbodTSa9dDEZUZ%2B1Ncts\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e9680434c8056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b10d57b17063c073a8f99abb4c42ab41","sha1":"a709f70144801d6b2abcc1f010b446d9aca6d319","sha256":"8aac0ec55d70d8dc9a3b3cf67d203326eb35898f8410498189b3de895ba7900d","sha512":"e50c01695e3ccce487b16559e12299d3f1751bfd4e3bc1ed5d6ca19d96159d45205e6bab4ae7a6477dddd47517e3af56a2f9ce8ebfdc967f4ee1e9856d48c9cb","ssdeep":"","tlshash":"ea313bb73a0352f3298287e6ae74a85d94b69d3583f0688cf038895d75acc31425720b","first_seen":"2026-03-12T20:01:57.860442Z","last_seen":"2026-04-09T03:43:16.95159Z","times_seen":16,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/recent-voters.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/recent-voters.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 6559\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-199f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFkWPEMhNq0W00PFlSOdDqS2taY%2Fmgx6rm%2B9wIZYzZ0GD8gjY4xxvSXWA9UBdVGjf6jCyqK3iqFdDC3MDltxNcmPoXA3Nn17KoqR3hCnzyqSIHXCuy1Jvi3SMH84Ox1To3nxyJHc%2BXDR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"12f27427d1b59fe77ec6518624eab6e1","sha1":"a34eead70b200c6053204a9e64d5afb9767ea132","sha256":"b234fafc55cd3e46072c0a56ea37c77db94c055e8f5ba140851b327bdc2b8de9","sha512":"29c549d75684bd84eaf2d6cf7e13c68779d7efe4ecd9112841ae6381a98fe3be6e0eb24cd0818f0f733bea963b3ec870dff41cd595428301f44022fed0967436","ssdeep":"96:VAkXQsIf5GU6Pul3WBVGQ+QsSIgnrOLRRzNWubXCsRYwyrMfPhHeaAV9TH9gzv:ikAFf5V6mlmBVGUrOLRlyVjT/kv","tlshash":"51d1af81293dbf4d04ce5529543b4b39407c15ce32964d81b88ce85aaeeec240ebe345","first_seen":"2026-03-12T20:01:57.86683Z","last_seen":"2026-04-09T03:43:16.952979Z","times_seen":16,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/pp2.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/pp2.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 229\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbeYtOXAMc0CypfKnAWgWVieNrZWR0zjPpZC5Hgn1gZiBmZpMerscOL%2F2yEQQmq8X5JXrxsveRnEyRgEX2%2FfBsiCKwVI9JCHr0lQ30ghwSPKBHKc1lAic7XPxb4yhUqEkrN%2BimcREVMA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e968040fc7a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"f7777816e540bd742bc4c5c754af4b81","sha1":"4e7d9541011db8f7c55cd525176ee049125d0db6","sha256":"8151ca4566b4390de0e1030324796b23c358349cbe298a8e1413c2975c9f84a3","sha512":"4465069f120900b3bed8d909969bd5a18fdd6282fe1deeb6549868339a0b828f2ff6201480df5a73b31920d4ac00062802f0392e63fc93e6befce5e4f9cbe5d1","ssdeep":"","tlshash":"24d0228d320f4dadc9841373514e1a32b7a143082e38c642ae2fc1bf0da622cd08024a","first_seen":"2026-03-12T20:01:57.863957Z","last_seen":"2026-04-09T03:43:16.960073Z","times_seen":16,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/pp3.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/pp3.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 230\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-e6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbX2Kg9r0eTsfompftG3AORIJav1KYHWwO%2BmWnXOfNTjbquh9NxtypIfoDBZXhSNzMSswWcRv1WHQmoPS25H4TKxo%2FJPyJxnV3btjerEt%2BR4X7CjIyZyg5FJqzkZUXRfe3hpfb5CdsIn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e968040fc7b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"6522f957d24b2cfa6c81869245cd29ce","sha1":"20c7f045372c033478e64a9a4d105ba8d9e87aeb","sha256":"d2a96483eda92d3f316786c64f6e01e18567cae636015d23b9ff563ed973df12","sha512":"d2f326d1f7c7809ad6fa6448929bbff911774eb9e46e306cf52efef8fe74e229cdd03b7b2fe2ccffaa6efb1ef8b9c4e37eb413809bee95e3c218f9444809cd54","ssdeep":"","tlshash":"f4d023d583f51d78f0055c3785434de05de3245c2507d0439e23c5db75655039847746","first_seen":"2026-03-12T20:01:57.872225Z","last_seen":"2026-04-09T03:43:16.963907Z","times_seen":16,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/pp4.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/pp4.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 226\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIgX3NUEfhIK6QvSGQ6LQNcfeE3SKbUkJlwpShTjy9VHUwBv2Z9rVM36rNu92PSTF8g2afUM1udn4IFKNtWRTfP%2B9YESDNzmYcdsK00Uqnt4Bz584mVV3a1%2F8aaSt9HwootdMiqvN2rF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e968040fc7c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"4f3e70a33a5dd8c2a15038013f74de01","sha1":"d84bb581e48ad3201604eee41410b863f0477245","sha256":"2e57ec9e2b5d11cb3e8b11df46a2b1f480a94420304548d8d6c82b227f669427","sha512":"e24187695bc2a3b8f4bc1492baf9a0c73f948d5f7f864278d00f50f7e129e5e12341fb09276284b0e1cfd709fccbc82376e944269483df4c8c62b1ec43b2bf0e","ssdeep":"","tlshash":"36d022e3c281ccb8ca040932971e2202cda402384b81ce139e24c82e1fda2088461706","first_seen":"2026-03-12T20:01:57.87068Z","last_seen":"2026-04-09T03:43:16.950093Z","times_seen":16,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:18.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /cms/images/1a0bc4208da75dd43bdbc3a163297ef0a97defea1b218a73ca15a41dbbd7b2b1?width=64\u0026height=64\u0026quality=90\u0026format=webp HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apps.moonvotecoins.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Apr 2026 03:42:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 682\r\ncf-ray: 9e968047aac435a6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 326199\r\ncache-control: public, max-age=31536000\r\netag: \"cfjvNnJSibIYcOE9QprnBJtq6arNqw_6efRIGQ7cyLDQ:9d46ce6f6ba23c4c40cc0d0741fddcb4\"\r\nlast-modified: Tue, 23 Sep 2025 04:29:48 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-resized: internal=ok/m q=0 n=605+1 c=0+1 v=2026.4.0 l=682 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=PFG2PNAGEUAr53nBAyEjOWHe9qU23Qogqh.oc__T4Yc-1775706138.8301263-1.0.1.1-PdM6IkZcBQweU6RusMMFwUB1a46E5jG3kWaF9WWy2odlTQKIGO8k4GMePyOpMNs2agvP.E4T9Zttl74FOQhIGRz9KpF92qPGBmuRiICpVouP.oqSCpX45beSG_bmxefOg_wW5CxDwj2oshK5yo1FUQ; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Thu, 09 Apr 2026 04:12:18 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fab68cabbd965e3da10d04264f05246","sha1":"2c2021ddadb8a16121bf5c6ef1c8d39a97ba5764","sha256":"7c7993e7e1104c18ce80051335cea53cb84b41403368c54234b50d8e7ddc4e2d","sha512":"a6d55b000dde6349738299a3bda5e2f440ad180789e0cf38f5f1f2cf46cbf23b14f6669fb2d18b14bf0a43403b35c53937a3e02ad4df6f19ca1d750d21c960c5","ssdeep":"","tlshash":"c8018313d7261e88cefeb8c2a48739d2161a6976c4618c0cf6312eca995d2752037557","first_seen":"2026-03-12T20:01:57.863145Z","last_seen":"2026-04-09T03:43:16.962522Z","times_seen":16,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/moonshot-light.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/moonshot-light.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 22786\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-5902\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CT1gTYv3IjFJp0wxYjV3FbgOsdMJ7Y87QjSB2AV59v4auL0w3WxfGFu2AMsbHMwhYYsL7RLRVrH6C7SO3hLKs2OBwCcvUXz8SdLSM1ad0dyMsI4dxbwzDsuveONXz0E2xYcjduxMflPf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 249, 4-bit colormap, non-interlaced","md5":"a57078145660124821289869bdf6652f","sha1":"b9defdd0f46b30880bcb03016fcbc12b4f3e51e3","sha256":"b7c6c522842070b66d17633a8843a1cebc0a436190d73da735c60a1c20e3e316","sha512":"db7698d06b0eddf32d70a292d91651e10e47419008b11354d620e241e9828ca6a35427f3b335c11c6645649927d45a20710099d16b0caf88bce9bcb174a8aa09","ssdeep":"384:bc3upUife9g8bwidhz8JR3aTbMebfq1ptJoxuo6kBDFQ5tyqgdEvuRGQhdTTkb8F:IIU8e9gov8j32bpmfI1dBD4tyqg1PdT9","tlshash":"05a2d0bb9b742063f6b905b3d9eab5e1725357da1400fda1df428a7c12d819065303e9","first_seen":"2026-03-12T20:01:57.868587Z","last_seen":"2026-04-09T03:43:16.960852Z","times_seen":16,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/solana.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/solana.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 54288\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-d410\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UT7iFttY2d9wSrQYFSZIXz27VzwO8TnN%2FOPlEu%2FwgYteltzRKR1eXt03771j1tfpY1oUf0FoebaUsZ0DjWV6pSjFVBkZsUZP4mxRNwVnktpv300kRfCRKYIaAY4gaSeFP6E%2FCHgm79wm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8266c111cc577d34c8b477a975d270cf","sha1":"bc1e9ab97f9def650cc42cb5e74501f6e8a33068","sha256":"6c4493824008d494ec059426b79304bdee4ac9695cb596fe0f7d6e34be085d79","sha512":"af4cc76746cefc2a1157ed69cbf9144754235d427d112d00b61001edd43c3bc4f0020dce52569e5f836f5a4a3a4500630adf0b4507377ef1f589353674d36ba6","ssdeep":"768:e0ffCJ49EuBK28WHVO6kPbwGvzQrgSM1Gc3k5I5LcAaEpoCdbLsd9:VK3q6W1O6kUG9hGUQNxILsT","tlshash":"e533f1a951947eb5d281e376a06f0d508a4380fb3ce763023761fac4e7776e0493593e","first_seen":"2026-03-12T20:01:57.873053Z","last_seen":"2026-04-09T03:43:16.949453Z","times_seen":16,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/community-stats.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/community-stats.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 19425\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-4be1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DB3H92WOErra5Ltjt0cDLxSfNXGEwTmB25dQhIr8HV%2B%2BQA9VU%2BcJ42GcVSyFJZHqjNKgwyZy%2F8wt2xO%2FA3jGoTrxeGMiO6n6Y9rva2o0h5PmsD1ooWfPX913GAvU1WKbLa4I7qrJyvhg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"63146951f873a9b67568099504cc68be","sha1":"e9a0c2132899923177debd49f0c6612492ccd797","sha256":"b7459ae92ee2e49cc1fd01490898980ebd8181b18c77e4e7f56decb5be135a1c","sha512":"50e6c295751abeeaf893f54e47bd295306e65b53b5c78fe454f7452a21a509c0109271d9ebdef1a926e3b032a9b62a792fd54cd99466aece27b0b90ce72827ad","ssdeep":"384:cRy1ji44MpyFWA2t8IRKZXl8RzyGQ93KaA5TGSk7KNlPsPdfbH:Q0ji/KA88dV8girfUP1r","tlshash":"3592c05f118138641dd3168738e77803569dc92172e7aef07e3a558ba49861cea0af73","first_seen":"2026-03-12T20:01:57.875085Z","last_seen":"2026-04-09T03:43:16.961954Z","times_seen":16,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:48:28 GMT\r\nexpires: Fri, 02 Apr 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600829\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-09T09:27:29.235914Z","times_seen":8010,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":123,"dns":3,"connect":14,"send":0,"wait":16,"receive":7,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/secureproxy?e=jscdn/getFile","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:19.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apps.moonvotecoins.top/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"fdzgxaf5rzfpx291ktkz\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nj%2FDXFl1dgmDVWQzM%2BWu4TrD5G9cfz%2BYWiEjmcm7LPjWV40XN%2BIdS3ZPR4m15oqMgnxXlHAeLPWgGzn8ifjBSBuazyl3rGekO4ulk6vZBlEq2IH5DWDt5kzDlKeHaePOrPuOYu0%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9e96804d5c9056be-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3317309,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c2785623279eb4c1014b9b72d9f576c","sha1":"29105df82a4e2a7b168f10373d2a181d05d4c806","sha256":"095375e18c4a5bf948a24986ddda0a127e1cb8ee1d117eb441d64042757a0f42","sha512":"42e41dc0c4c23d9c34476ef6f003e74597740d85c9bef5df3784aa0ba496dd64cec5b5b1f6a2da780c044e5a067d6a257b4a1a72817b7d6ca3eb0287705c0c0d","ssdeep":"24576:lYyjCq4rCMBZ849RxN4soD5JaHTRsq4Bhbb9M:lYWdMhfxNeeHFVK6","tlshash":"14252394ac4645ba030c266a30b75e1ba6a03f44449d92dfe759dd827afff71c2cb81c","first_seen":"2026-04-09T03:42:43.725925Z","last_seen":"2026-04-09T03:43:16.952232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/secureproxy?s=%2Fjmpd%2F","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:27.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apps.moonvotecoins.top/\r\ncontent-type: application/json\r\nContent-Length: 1414\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1414,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBBAMVAxYAFwC2AvsCEQDlAi8AAAIBLAMAAO8nhn2XtsKCAfZge0n27rF-wzw_920CAAAd7vZZvwtZu69rgcTiV4wR7pShBcWrKxJV1wu0-danmLVivi_GcJBF1IJRCTC75rKD8XWw0FrwgnzB-GLWi5UMWLZ48n3TTYnNxy0qp-YJ2h-2Twah5b91qaBFfPaSPApTkSDizlKsxZEKpKLsJAILKS67I5V-O-VIWm-IJFTwxjQG-28dmIO9QEgrvS9gOCfOM9A56kKMOordGDn973g4EHIW_455Z5_oqK7IKYCwxuhhZoYkywC4KAsZBn_WTaSwklu9Byobu-mRuqJSkJSA1GpvPgzbt6oLINuzEe5AysZf0ONN_pPJHSpQIIjNQ5LIxZJZezhRKqRrXISj_j0V0s7kEBgGWLwn_T23XU2lkpAwOe4ZexY46RguhMxuCf5-sy8yPPm5xwu-ajNU4Uv-DTE5W3Lb-4i_r4XtjrZi6mMC5HvvuzyGU6mzHmtL4FOJ6HnWwRinvFLUKe9o5RQ0GK4G1HtIRr6H7hQYnTBl5S7W5hKtrO4cLcAOp4BWMUe4Y8qTXALpmQtGv2W3hiLTCW_NR39-zrm1kS3Z20V4A-or1Ic_aR3IysLixHPIfGPLUdapmyCMD3BEscUXqCl2HARq4ZKrW7nFdj_6h9_FgjFgzWl6A8cmimQPoD4nYR6GVSgGvlTUwsy0-JALP9_2dZnaesIBwxQu1JU6fgnsOkMLIoz6VzFA5YS83kRPsBZYcJe9RtuFn6KGJJdWlaeqBaXSpFlcncwmvcTGcccYjvggPKqwgAJvvq9zC3q2kNgcUSjWuJisCOM7furJPZK6Hg0bkYB9GBPHo_sPduFQaZPMEv7hXQ0u6zdAK5mmQNY6OSC9mNqADBYSBjD2-MM0KAviFdWgQUNXEUG9AWJOPPjyvd069nvlrEcoeVAReajOrzLQoekhQFVsz0kEFztUElzwB_PKGtuS0H04SQEPesYWffBbTgHHAjacS3ZethhPoZGFNkdwBkmBpOhKRQQh8kEfwjkvcETpbr2kHdfcAsuSRQRRvBdIgKlC_WfgqNeuagepG0n9HgCLYq8TeaOSL1fU6UIC2135Toxh37tYvG_l8ize8vO9j816TM-mXZbidPcLD05_MEDIeFbHA0lZgJmvEA\",\"challenge\":\"eyJpZCI6ImJZN0RKdS1od2JOVHlMVHhwa2VSNmciLCJub25jZSI6MzYzLCJoYXNoIjoiMDA5MDdmZTJhMDY4MzI4MThjZTkxY2U3YzM2ZDNiZDNhOGMxODk3Zjk0MTE1YjZjNGIzMzliOTVmMGY5ZWQyYiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:28 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1775706207923\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 04/09/2026 03:42:28\r\ncdn-edgestorageid: 879\r\ncdn-requestid: de5b256dd5c8a692c452a745e225e34e\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6lPiGh39%2BLCwuSumreOisn4p%2FmRjt91MoGDMj8ZlK%2F79EorycXUemKQYGWMI8zxuRvVqzUyrddirZ6lLrvfPKUf%2FW1WOV66G6UvIFEjCMbHkDHz6DFI%2Bi7IGN89QRJgNe08XPwlH0Yl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e9680803ced56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T09:28:02.4502Z","times_seen":13534720,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":653,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/trophy.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:16.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/trophy.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 34425\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-8679\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkLgVp0%2BsXigiJ%2B3GSNsahKDPOuCrH6XYncxnd8I9Dvk7E%2BapKpa5MCSLxGtfy8Ms6GOgLvNmM9u0YUZ7N2J0BMf3fL%2FV8AaVlhXqdEl3N1at1S6jILoA6s9ueeg%2FQHN1dHH44CRwTLr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680380c4c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 4-bit colormap, non-interlaced","md5":"c77547314c4e0fca4fbab05e44709317","sha1":"f549d875f9539f17c6b05056161bfc808aa893e2","sha256":"643e182848be93edd7a1911e6176b43e4a4525edcf273c927ba43e2922040ea5","sha512":"d2812661f1bd39c9b2d5802a97834321026cc4eef469e8a563151f445ece18c1ba1481c0043554826d6089ceba7de3da0f2be17dd20460bee902e6589e17964b","ssdeep":"768:jW/dM2VDilAjFnEEsrdp5K8vOOZY61GwUw6:UCblAVEnrdp5K8FGwG","tlshash":"d5f2f1b32ab38c15c54ce734736f335a1e6619867eb7a51e8b618b005ec7300fa97da4","first_seen":"2026-03-12T20:01:57.867741Z","last_seen":"2026-04-09T03:43:16.956296Z","times_seen":16,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apps.moonvotecoins.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 04:48:28 GMT\r\nexpires: Fri, 02 Apr 2027 04:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 600829\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-09T09:27:29.235914Z","times_seen":8010,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":155,"dns":0,"connect":27,"send":0,"wait":15,"receive":5,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apps.moonvotecoins.top/images/question.png","fqdn":"apps.moonvotecoins.top","domain":"moonvotecoins.top","tld":"top"},"ip":{"addr":"104.21.78.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apps.moonvotecoins.top/","date":"2026-04-09T03:42:17.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonvotecoins.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 18:09:24 GMT","end":"Sat, 27 Jun 2026 18:09:23 GMT"},"fingerprint":{"sha1":"4A:8D:C8:84:5B:17:C3:32:FD:B5:42:A3:AB:27:80:F5:B7:24:C2:48","sha256":"A7:29:1C:DE:FB:73:86:68:C3:68:F9:75:43:50:05:BB:E9:E7:34:95:4A:E2:0A:AD:26:DE:F0:5E:4C:9C:CE:E7"}}},"request":{"raw":"GET /images/question.png HTTP/1.1\r\nHost: apps.moonvotecoins.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apps.moonvotecoins.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Apr 2026 03:42:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 7481\r\ncast-mode: default\r\nlast-modified: Fri, 03 Apr 2026 04:55:51 GMT\r\netag: \"69cf4857-1d39\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wy1DZt0nPEk9bQengacwgFRM82tuOlwhZPeJQbPi%2BtkKOit%2B4LvVMlasTyv2ie2CsrZuTzilzbypzf5U1%2FfxRTG6r0RG6M5ZIwswJo6pHm69rjRqqgbL0Nrvp98jsDRT2iNauCKhePR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e9680411c7e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit colormap, non-interlaced","md5":"ab5f8e153fb1c1be0fb94d30a2b19cb4","sha1":"218c15016d156105d1b1a270068244e611d93bfc","sha256":"384163e9bddc239eab427d4d7fa70d667a4824dfdedbfc6188f3a08d332d6f50","sha512":"03115a76256f76059e21ae9c43e7f92076ef1deedd5422f04f953aa4bb4cd09f147612c429bf85ddadf4cced29b9f572e2a70e3fbdd822cc8457fb911b33900e","ssdeep":"192:4Z+ZZZZZZZZZZZZZZZZqZZZZmCZZZZZSZZZZZZZaZZZZCZZZZZZZZZZZZZZZZZZF:V/E5yvWNRveOslFeexsBu","tlshash":"d4f17c3604ed2810c76749d6fdad7cb6df9bc27817a6c1aa84728404ddb4b8811376e7","first_seen":"2026-03-12T20:01:57.865879Z","last_seen":"2026-04-09T03:43:16.963213Z","times_seen":16,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-09","alert":"Sinkholed","trigger":"apps.moonvotecoins.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}