{"report_id":"e245c2f0-3cba-4648-b026-275ce0635c4b","version":6,"status":"done","tags":[],"date":"2026-03-04T13:10:31Z","url":{"schema":"http","addr":"vote-dreamcash.xyz","fqdn":"vote-dreamcash.xyz","domain":"vote-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"title":"Season One | Dreamcash","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vote-dreamcash.xyz","fqdn":"vote-dreamcash.xyz","domain":"vote-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:10:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"vote-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"vote-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vote-dreamcash.xyz","ip":{"addr":"172.67.182.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-04T13:10:32.074517Z","last_seen":"2026-03-04T13:10:32.074517Z","alert_count":2,"request_count":1,"received_data":42857,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"votes-dreamcash.xyz","ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-04T13:10:32.072827Z","last_seen":"2026-03-04T13:10:32.072827Z","alert_count":10,"request_count":10,"received_data":8102529,"sent_data":4835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-26T12:11:58.094577Z","times_seen":1914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-25T17:44:16.785562Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_1.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-25T17:44:16.785562Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_2.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-26T12:11:58.094577Z","times_seen":1914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"votes-dreamcash.xyz/7791eec01534570a.css","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /7791eec01534570a.css HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"699a0d8d-1d920\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zi5Ea3Wzx7Q7IQTTKqMl9LuswkyJByw9gLJWhhXZ0IWO3SHeOKpfD7BzOsM1Hkewhblls7SzZzZqGWTaLFoU45pcULVuc6j%2F4RL5cFPKf25zrYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711e906ed18a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121120,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64751)","md5":"aa23eff879729dbd2d979567ae9eacfb","sha1":"0cded95262b221d4e1a120a75a0f133bf0ee8c18","sha256":"fa55dafd96f28c206c61998fc5297980809ebdb81e39bf52822ec85b5f193d1d","sha512":"ccc5c5ef202c66e0d62b09ad0b90c253490fc1dc9a17c040c6be10ea2e55f6f4158a7a044c7f036a80435033d31287bbf96f631256e807a6cde212fac008fb2f","ssdeep":"1536:RJdZsLrnV03DzApdqRPtncHlNw6445VlEO7SmVUd3nCiHEDNXorrKmxMglFk:RJdZYd443lEO7SmVUd5Va","tlshash":"9ac353e8f610e57b6c37aaae13dcd65ca224bc069e0247dfbf15a08516cbff215c2614","first_seen":"2026-03-04T13:10:35.657349Z","last_seen":"2026-03-04T20:09:05.432997Z","times_seen":6,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/assets/eleven.js","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 21 Feb 2026 03:29:52 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"699926b0-764325\"\r\ncontent-encoding: gzip\r\nage: 60\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ToPpapqqByvrcan5anObKDLKICdNb4%2FDoiaJvFn%2BvTYLOfKoHai3TRzDsR4ot5QImTSgXNf4s8qrhGBtru7fggFJRz2sarIkNHcEp3OK1e%2Bykk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711e906ed28a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750437,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3da65c187a23f1a6d8d51f23810b2ae0","sha1":"7061de0e6f09d4ed1a69c2a3209b6501c9904c8f","sha256":"8ee5c7ae26904c3aac81c5de792f3a8e3a6de0d3b9037d31e91c8a033338e6bd","sha512":"62c139e3938c8faed7c50044eab73b4297ea13cb408631533db5bdfd20a7b00235f2683cff5f766ce61e94131f7f8ff82a14baf45051b37e4a2c46b895d6d3e0","ssdeep":"24576:428tHPYfbu7W152TlNJvleNRlPpg+8r/QR2OFnniOflYTwrJfowV7HJ8X36r5lD6:42I9tkpPpg+8r/QR2OFnniOflYTwrJfW","tlshash":"0d25f8ce2d99e56e015239b73d27209be06edc08715ccae0fb99bc34f85831d58b7a58","first_seen":"2026-02-09T00:41:26.532086Z","last_seen":"2026-04-30T11:04:05.824262Z","times_seen":134,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_2.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbpVA0lrJ%2B2uupaPMK6KrmmvESkG1fihLgiocaHqF6esbEMcp%2BU1QFXFa4gmNb6jILaIJRYy0OHjIXHVBjCOB%2BPnTLLjzb4ohgCN0eaYmjletxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711e918ee98a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1410), with no line terminators","md5":"73fe47150429077c60bdf9c3183a05bd","sha1":"237e94630a913293b765e5f5fecc4d10de3063a4","sha256":"a5c54e66d1f12192b981038578e98f0c460c13e3d8375dc4d16f04ca786690c6","sha512":"e9572dea90b2264ee860f4cc2445461a3332d8d9391aa454f08be8252412e0828733ddbe30f20774932dbc6d985a51b18f425582fb752d20028d9bdce9fe992c","ssdeep":"","tlshash":"2221b8e27811fd19501b73e9dccea04da513fa1deb001cc8bddea91ec9ba93d111589c","first_seen":"2026-03-04T13:10:35.662514Z","last_seen":"2026-03-04T20:09:05.426192Z","times_seen":6,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/59a3c36375c33dd1ca6ac73d12a2395963d6b21d.svg","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /59a3c36375c33dd1ca6ac73d12a2395963d6b21d.svg HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/7791eec01534570a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FryoaA8Gk2ob%2BCUwiPpkAJ%2B8h6c0YmLb298w8GfeHgw%2Fja7U2LJaQya77%2F16VvfElJ5swHvWpJbLj6FZIvQplMT4W43ymB%2Frkp2nNVTCCGcEI8%3D\"}]}\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"699a0d8d-15f\"\r\ncf-ray: 9d711e919eec8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6061a44ea0a952321c0232d84896cb3","sha1":"59a3c36375c33dd1ca6ac73d12a2395963d6b21d","sha256":"b54c17a68145cd16d5c6a8cbfae6ad0f17dcd590f3111c9dc1f46101ee8099e9","sha512":"5b2dad14edae62003b59b69e967642a6469602887d9e093a0ae49d13e7e3c8c0861967d51c65365094b240cd822cbdf94c245b1d42a0c3d3dda2e935c35e0b76","ssdeep":"","tlshash":"b4e0c6b684e2082eaa0e8042e0d4cc28e21be40403080cc5a2bd923291820c0ed462fc","first_seen":"2026-03-04T13:10:35.665303Z","last_seen":"2026-03-04T20:09:05.429665Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/access.png","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /access.png HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"699a0d8d-ad7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5bzdMPCdHiTdTXZ8Ab9LRAhp5GzlCD3yv1OoL9ilAOgtOMz7PMOmZzLTr9jShEb%2FkBCrAC6pwc2lZdhDmbcuNI9l1Ujm22dNTBl6pT%2BgwxRM98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711e91bef78a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 103, 8-bit colormap, non-interlaced","md5":"0d84b8bb66ca9cd9c8328a90782c4e13","sha1":"c9bd74304d52a46bcc6bbdebfd5223b6d2d89021","sha256":"88be64af7e9c592bf6fbb33a9e1a0357165c32630659d705813b0a304b6ae22d","sha512":"834f12a6b764a602562eb5c9679dacbe572924aaedc4f28df3c9c6437245666b490ec59e052400a54c1ae4366f22dd3735740d836dbd9dd14a63784cbfa72b2d","ssdeep":"","tlshash":"d0517cb7ba1b202bf77b5db877126cbee2740020aa13d373c0bd982963105c40a91f8d","first_seen":"2026-03-04T13:10:35.668335Z","last_seen":"2026-03-04T20:09:05.435489Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/48e0d3ef989a1d9a.css","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://votes-dreamcash.xyz/index_2.html","date":"2026-03-04T13:10:08.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /48e0d3ef989a1d9a.css HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"699a0d8d-19a2f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgxZtdNGwbin3rjeMRKOiw%2B%2FH4Kv4nBx3G%2ByVXoZNCoudijjLen5YnA3NcEbp3%2BuXlZXjvU5piOVcbp7NUBicZBhSftK2VmrHyFmhK7MBJsBIFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711e91defd8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"cb7c2daf4a13f5237d0de693b62e91ba","sha1":"2180230f5428c19355288ca39e17730595a142b5","sha256":"4838f7859a995e168dc7fafe15eab78f2f05a0c930fb6f16ae0de4b0c99573df","sha512":"099855c1ba191d0a6ccdfdb70707c9a2cd3af8d22129506da0bef98650cb281cf9ee89beacf2748e38ef24a123f6901557392f3d12d8f42655306b8b0fa2df3c","ssdeep":"3072:MGQhfVRrBCmT2WTHsQ2wytybjrSWxDhbvgV0:MGQhfVRrEmaztybjrSWxDhbvgV0","tlshash":"f3a3711df652113f3c2780f9d25cedada116b1c0ee3a6be6be4221108ac67e35de7254","first_seen":"2026-02-22T19:36:10.071967Z","last_seen":"2026-03-04T20:09:05.436456Z","times_seen":10,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_3.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/index_2.html","date":"2026-03-04T13:10:09.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/index_2.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfylyzLUOmcotSGLmt%2BvTaSh%2FFjOM0EP0fJ42iLyXNult7cVBmUUjSowXFewXBzF%2FCtgjP2rT6G%2FM1vBXRggxNdbZVy3AXtOLoKq1U9QzEjdJQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711e92bf3f8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3762063e0643915fe267822ed73a3fdc","sha1":"7697ebe1c64f3751a8f9cecddb39e64378f07706","sha256":"1bf1c9d160ef57f69eef1dafb70d2248f30f6766db11e132efee53f789afb4fc","sha512":"e9ae2d73ae71a4c0f343a505cc09ab772c6f8c51cfdd3fada94e4a75a10da84412ff7dac616677ca0348698f1b40e0deef27327e6875ebff4757e24fb3ee9d31","ssdeep":"","tlshash":"06c02b22d8004c0f79509fd1cb8af1c4c043dd3ce8215d10b873b154e9ac131c012548","first_seen":"2024-12-16T05:11:29.836626Z","last_seen":"2026-05-04T09:50:27.582674Z","times_seen":13,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-dreamcash.xyz/","fqdn":"vote-dreamcash.xyz","domain":"vote-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:10:08.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-dreamcash.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:22 GMT","end":"Sun, 31 May 2026 19:54:21 GMT"},"fingerprint":{"sha1":"BE:E3:15:54:30:12:8E:51:2B:CB:85:41:CF:40:D8:8E:41:AE:12:0C","sha256":"2B:51:D3:DF:B8:A8:B6:69:B4:00:44:71:FD:04:3C:7C:D3:03:D2:6B:CF:EF:D1:D3:8C:E2:67:9F:74:AE:78:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-length: 0\r\nlocation: https://votes-dreamcash.xyz/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wi2u8v6Ye%2BLQOMH6yZWCxrjKvhjhj9RarLYyQIMiHjcX5bnznZH%2BR%2FyX3EF6W7WJZFWFBgirRgNbKPIClsCtidvos011AjRJNOrr0KUDEcdIuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d711e8e2992958c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42354,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":81,"dns":48,"connect":8,"send":0,"wait":9,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"vote-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"vote-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/index_1.html","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:08.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmzyM1THpWFSHHmcaGnw1%2FFhJWCN8mx7CS1pDaks19hFFGukIE9CY6fVZzTv5oKpf%2BRfFwYdcaVtPuGiUJ69Kcsy0ILpI%2FKrHfjZsFAPpN8qCdU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711e918eea8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56901,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56895), with no line terminators","md5":"094df2e915ac60d4dceb5a885b17f9c1","sha1":"cfe648227666fb1efbebee015608cc8937cc2b95","sha256":"c9382e69674decb42e78017e6308af281ff7f78da2c13e041c99208d8d78dbe2","sha512":"9ecb427326528d4309cd0946602307b088d5a68b45119451ec0d6ddd8aceab029b58a1b75075fae9b4ee8c3a3e7b2d975361e37bb0a8d51404aa355ce25499a8","ssdeep":"768:uLWuNa3v7s4uiznLWuNa3v5JuiHC0MD88BORpmalZuUJ9vzoCx:8fa3lfa3ecnuUnvzoCx","tlshash":"1e43b7135aa05beb700bbb7967a0b6c4b2239b035f25b3e7e15803b14f8d5ae1e53345","first_seen":"2026-03-04T13:10:35.676215Z","last_seen":"2026-03-04T20:09:05.42777Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/favicon-1.ico","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://votes-dreamcash.xyz/","date":"2026-03-04T13:10:09.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET /favicon-1.ico HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://votes-dreamcash.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 13:10:09 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYHvusv1THnW3V1wvMsIWbRD%2F1auXWmBevtGX9qr8fny4W9uXGk76%2BJJvk47bNt1utv6yEsQX1M7b50f0r3jO6VJFWUIqA%2FqXI57%2FSXW1Zjn%2FKE%3D\"}]}\r\nlast-modified: Sat, 21 Feb 2026 19:54:53 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"699a0d8d-3c2e\"\r\ncf-ray: 9d711e95efc28a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ddf1d849749e3b203dd956521ad7b368","sha1":"8a7dd93aece5f9c324a74e55eaf770e701a1787d","sha256":"98addbc71d6d29dd039f3f5b286d1d0e2db298ef8a30e29587e8078712f5957e","sha512":"fafcca6095ab692037aa4e56931b217b31b4dad52da1ad12a435bcaf1565072426c828dfc5c11a61d8e2b3d2d0c736da1b26ba104b474e9af9201488747adbb0","ssdeep":"192:moc3wN2MGhHQ1ge+ej9/Qa3CjMyQkowSRUcQPadxy3:O3wuDE/QaE8pRUzAy3","tlshash":"61628721710815a6d02c2b30c376ae3d4a2aae46f52a954ff8c2f1575e33e13f137a1d","first_seen":"2026-02-27T05:50:58.71321Z","last_seen":"2026-03-04T20:09:05.420572Z","times_seen":15,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"votes-dreamcash.xyz/","fqdn":"votes-dreamcash.xyz","domain":"votes-dreamcash.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:10:08.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votes-dreamcash.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:54:28 GMT","end":"Sun, 31 May 2026 19:54:27 GMT"},"fingerprint":{"sha1":"A0:D2:09:C8:4A:0D:AE:C9:E8:C2:E3:42:A9:15:9C:99:50:EF:41:24","sha256":"E7:E0:01:00:65:9D:36:9B:59:7F:58:DA:C8:E1:09:93:09:61:BE:2F:EB:3D:F4:22:D3:41:3C:64:FB:B0:03:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: votes-dreamcash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:10:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Feb 2026 20:28:18 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmk3oCE0OaH1HBkSoYSsh6pxO6LUWxm3JcgjkqkT%2FlE6dewGzmWVYjSBo5k8zoX6lAB6W9HJxBOxP3h1TeYauY1dTftJyabI2V4YXxvYSrZI2uQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d711e8edccadcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42354,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21543)","md5":"227240068b0281899a1dcfb9fb12705d","sha1":"ddde9834758ff7d2c37e7ca46b77eab9b6a03d90","sha256":"55d3aab8d54f6806399417a02dbf6436a046df135b87c269a269bd257dba1dd5","sha512":"4beb0bb56d180334f05f37fbfab3de31bd32bbdef657c9021fdb767a6f153ee2850f789de1465d562383982980b25a6d94194bed6491a24fd1e4b4a65ef47609","ssdeep":"768:Lt0rGV4xksc64Jysq7vdKgTDnxUuoy/Lv9UetoRvWd0z9vzoCx:5ebx/c64Jysq7v4gTDxUuJ/NoRed0hvT","tlshash":"b81319e0f80c023d2a1f9959fd89ee6ca211b141af155861b10dc096fcd7fe179fae16","first_seen":"2026-03-04T13:10:35.682393Z","last_seen":"2026-03-04T20:09:05.422785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":91,"dns":57,"connect":12,"send":0,"wait":69,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"votes-dreamcash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}