{"report_id":"e1d7c445-70f0-4e63-906e-4d090540d02a","version":0,"status":"done","tags":[],"date":"2026-09-20T12:49:11Z","url":{"schema":"http","addr":"supportvoting.forum/","fqdn":"supportvoting.forum","domain":"supportvoting.forum","tld":"forum"},"ip":{"addr":"93.152.224.27","port":0,"asn":207043,"as":"Dedik Services Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"supportvoting.forum/","fqdn":"supportvoting.forum","domain":"supportvoting.forum","tld":"forum"},"title":"Vote","dom":{"size":8964,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"858b2715d7a2935128d29cc179469b35","sha1":"981a9d8cdad6ee91e1e2f27a35638cb446d232c6","sha256":"c82e4481c0788b821e886baa8911fa19c4d3acbb6957d1df584cfd4ed01ae9d5","sha512":"0ce6c9a72cecfa7cabd7f0c8bcdce090c8859d6124bed3e4fcf0258267279ce185e26af2d55e6ff81ac62dc827b133b7d21a58ff832cdf8b1caa6f9848033102","ssdeep":"192:pT6x+DkjOqabkMvo7bHyGDHtkkKUBdSGXgUaDzpaJDYbHBAQBMzi:plGObHBJBMzi","tlshash":"db02c6b76be7132a2b23815927dbb70ca364d007c50ac95579cc62c88f81ae5d1e379d","dom_hash":"domhash44b70028b576b9468b47c1211e56056c","first_seen":"2026-09-20T12:49:15.031507Z","last_seen":"2026-09-20T12:49:15.312659Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"supportvoting.forum/","fqdn":"supportvoting.forum","domain":"supportvoting.forum","tld":"forum"},"ip":{"addr":"93.152.224.27","port":0,"asn":207043,"as":"Dedik Services Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T12:49:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"supportvoting.forum","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinmarketcap.com","ip":{"addr":"65.9.46.94","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":2023,"first_seen":"2013-12-04T12:29:17Z","last_seen":"2026-09-19T14:35:20.926474Z","alert_count":0,"request_count":1,"received_data":5061,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"supportvoting.forum","ip":{"addr":"93.152.224.27","port":443,"asn":25211,"as":"Euro Crypt EOOD","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-09-19","domain_rank":0,"first_seen":"2026-09-20T12:49:11.872643Z","last_seen":"2026-09-20T12:49:11.872643Z","alert_count":1,"request_count":1,"received_data":9188,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Python:3.10.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"SimpleHTTP:0.6","description":"","website":"https://example.com","common_platform_enumeration":"","icon":"","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"supportvoting.forum/","fqdn":"supportvoting.forum","domain":"supportvoting.forum","tld":"forum"},"ip":{"addr":"93.152.224.27","port":443,"asn":25211,"as":"Euro Crypt EOOD","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"af6aea3628db9ce4c29d327ae4e1cd05","sha1":"41d5f8f6a7c63b3c02a2f2a8f3dbc8e1b0b76948","sha256":"f83425d87c16406237d6f915717e288cafc7316fa97a9a69a5729c53355f8474","sha512":"f46ea133920be613c2020259556af6dc8868c53ed27cdc3e33999ba2a1400d099d72fc4f00f4a94a9b1051e652af5db541021b4d05721bc0aa736e399be31938","ssdeep":"","tlshash":"8151206fb9c773b65b67206f534fa158a0158503449ee6097c1ce2c28fe0671c2a7acc","size":2460,"data":"","first_seen":"2026-09-11T02:57:23.582944Z","last_seen":"2026-09-20T12:49:15.314618Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinmarketcap.com/favicon.ico","fqdn":"coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"65.9.46.94","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://supportvoting.forum/","date":"2026-09-20T12:48:13.428Z","timestamp":1789908493428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 29 Jun 2026 00:00:00 GMT","end":"Tue, 12 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D5:9A:BD:FE:96:92:C9:38:DD:5D:DC:08:9C:CA:CD:83:2F:83:EC:10","sha256":"C3:DA:46:91:F4:79:BC:21:AE:58:87:13:F2:AE:27:65:A3:E2:E0:15:17:D4:D5:E0:39:7E:08:52:DD:2E:02:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://supportvoting.forum/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ndate: Sun, 20 Sep 2026 12:46:36 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Fri, 04 Sep 2026 13:08:30 GMT\r\nx-permitted-cross-domain-policies: none\r\ncontent-security-policy: frame-ancestors 'self' https://ss.datasconsole.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\netag: W/\"6a9ac2ce-10be\"\r\nvary: Accept-Encoding,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: mJXaUCQVoYz6WZuQXUCMfn1THhbseHjT8p3nXusLVNAeIYS77qAFCw==\r\nage: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":2307,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6cbfdb624f3bbcfeaeafb818657c1362","sha1":"00caae801dd483e1bb5db50ae0b5221036168cee","sha256":"54e8edf66a7f7fad7d975470fa2ea7cc036757ba7897d05f8edf87f37cd47aab","sha512":"f983cd5f2929733818578b72c89cca4b51518e667835783163545f21bfbb53205c279073504f585c619a320c0974f49ab635d9462ba548fee434ccb36b43ee61","ssdeep":"96:tLWMmnflSz1PJ8ClRjLjZ5eqVLRLPWvTgODtkzMq:VWpn9G1PigFLF5eaRL+LlpkzB","tlshash":"1d91f06b96f3d69ac69610bc4e1072c9f5a89cb4406b3375be41fc64be3e5d4f1c4128","first_seen":"2023-05-17T12:15:22Z","last_seen":"2026-09-20T12:49:15.31395Z","times_seen":123,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"supportvoting.forum/","fqdn":"supportvoting.forum","domain":"supportvoting.forum","tld":"forum"},"ip":{"addr":"93.152.224.27","port":443,"asn":25211,"as":"Euro Crypt EOOD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T12:48:12.842Z","timestamp":1789908492842,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supportvoting.forum","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 20:14:57 GMT","end":"Fri, 18 Dec 2026 20:14:56 GMT"},"fingerprint":{"sha1":"B2:74:C8:81:CC:17:C5:78:EC:E7:8F:68:D8:9B:13:93:E2:B3:E0:71","sha256":"85:97:BF:AA:33:D3:AE:81:BF:13:25:9E:B6:68:B3:C5:B7:5B:7C:6C:F8:28:37:79:C9:F8:2E:5A:C8:F1:DF:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: supportvoting.forum\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 200 OK\r\nServer: SimpleHTTP/0.6 Python/3.10.12\r\nDate: Sun, 20 Sep 2026 12:48:12 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 9031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python:3.10.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"SimpleHTTP:0.6","description":"","website":"https://example.com","common_platform_enumeration":"","icon":"","categories":["Web servers"]}],"data":{"size":9031,"size_decoded":9188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4805723f0fa4ac856c0d060be65489f8","sha1":"6da046e0f2e9fef2e9af8bd2c5af7fec959025d7","sha256":"450c18a5bc925aaf2d1911c5121ebf3177a9a4c7c672dcc915be16547ad8827a","sha512":"c5a0a2f15f4bff2454187d40f9e8ec8fa3405e57fabbeced12b3cf28d45e81c6b0d9e6595d56495bdbff8f6b7de2175b6a749a934a9599f30c9cab86b18c0ecf","ssdeep":"192:/T6x+DkjOqabkMvo7bHyGDHtkkKUBdSGXgUaDzpaJagbHBAQBMzK:/lG9bHBJBMzK","tlshash":"4312d7b7abe7532a2623816927dbb30c9365d007c50ac85579cc52c98fc5ae4c2e3bdd","first_seen":"2026-09-20T12:49:15.034121Z","last_seen":"2026-09-20T12:49:15.313318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":21,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"supportvoting.forum","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}