{"report_id":"e56917b8-3dbf-4118-98d9-c98bf152015d","version":0,"status":"done","tags":["phishing","steam","gaming"],"date":"2026-06-26T00:56:17Z","url":{"schema":"http","addr":"workshopcommunityvoteshare.com","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"title":"Sign In","dom":{"size":426803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51410)","md5":"71b4bcfc05268573f85eefac705bfda0","sha1":"f17e76331ed01aedb27edefac047b5a4125779d6","sha256":"71c3296b173d1fec9eaff1244d1ed9ddb3ca851d8cdddde7067025fd70280805","sha512":"f101742c4f6c4373f4e6a2021e5c4c613b74db07d959787fd0b7fc571d036701a5fdf219c00d5a227dfe34e75ce6a2a1cee224878bd0e747ac714e485aa09481","ssdeep":"6144:xpIzpILSrLMnwqqFiaWkcuoRGx88Rewmq/9S:x264LBpiancuU58Awm5","tlshash":"90946930960d28bd772fddd2d00326910fa9a403b6277574b29e34f857cbe68c6abd94","dom_hash":"domhash9aebb753898e314dd324353525ce347c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"workshopcommunityvoteshare.com","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-31T00:56:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]},"summary":[{"fqdn":"workshopcommunityvoteshare.com","ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-06-26T00:56:18.178065Z","last_seen":"2026-06-26T00:56:18.178065Z","alert_count":10,"request_count":5,"received_data":1281741,"sent_data":2648,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"birdsandolphins.com","ip":{"addr":"104.21.31.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-05-15T23:48:19.167518Z","last_seen":"2026-06-25T23:25:02.975408Z","alert_count":0,"request_count":4,"received_data":3045,"sent_data":2405,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/3py5ywjp57uf.js","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da92799e0b9aaac7721b7a475761e76b","sha1":"7f091ca094f39c128145c526d2e3ad6bceb7006d","sha256":"494e6e22120f858c498821ad01b9cd25e68caad5b7ba293573bf1d1c2f9aacff","sha512":"7ad3abd779de78cc436e80246319dd76497c1c042d0336bbfa7bb4477cc29880754b9b9c8d9bc60689063769a2b1c05c67ed0573a048934f558756acdd2138d6","ssdeep":"12288:vjtiXpSqzk2qIFe+JUWs34LBpiancuUSH/Cufad919u3VaTmXAlrh:Qk+Jjsy1cuUGCN3Dh","tlshash":"f3452a706b81e6ac031b4f66b71bf2d4fd56089fe9484cdab850fc547daae01e5e81b0","size":1204748,"data":"","first_seen":"2026-06-25T23:25:06.081567Z","last_seen":"2026-06-26T00:56:25.200575Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e471062e50892b4dab950e69314c131","sha1":"d69cd6d43fb321148098bf8ba12f37bc424842e0","sha256":"f2134630c4ee035e66d5cd14a3dd90d20c94f95413bed5e13ea344e86d082704","sha512":"2b4dea031d56dc06ce1a6d75bd6a8641f04d5e189e588a2a6d8b8f85ea292e35c248d1b8405adf6351c97bd737c7ce6a799081069a1727b27798ad1621ae2c64","ssdeep":"","tlshash":"8fd023b53d75c431759d01471077d398767024547751f540c1c8cc2b7e20fd344b195c","size":217,"data":"","first_seen":"2026-06-26T00:56:20.223323Z","last_seen":"2026-06-26T00:56:20.223323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01ae1ba0d0a96679b2b16c472d7cf757","sha1":"b40b862d37e1de03cf16de06b77987c623f4d41b","sha256":"0512d510bea6573b31a737a2a21477d6328d567cfc56a02ab7eeb366e00b63b4","sha512":"0bff747188b04d83f27fe65b15bc77b49ad480c6f2a5b18f310a392a3e4b7c6f82c1ad6f86edcc35ff95ec8709190838a772b79a9ecc7a2513a5d4e3790e8d41","ssdeep":"384:/Gv3dO4U8+AIvIpZjfcAO8T2WIjQBpaawzuig9z76g3CXYmJB:/GnDtPZpwzuLig3OB","tlshash":"2492a7ab36d9f069437161f5045be0cbb26e9964b064396cd120e4f8bc70bc972badcc","size":21072,"data":"","first_seen":"2026-06-26T00:40:44.914829Z","last_seen":"2026-06-26T01:02:31.475198Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.471Z","timestamp":1782435352471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"workshopcommunityvoteshare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 19:31:38 GMT","end":"Sun, 20 Sep 2026 20:30:18 GMT"},"fingerprint":{"sha1":"14:5D:A5:62:EA:71:8D:7B:4B:6F:0E:18:6B:0B:73:B2:A1:26:ED:23","sha256":"83:14:F8:AE:05:50:A5:68:91:84:7F:E7:0D:87:95:96:54:F7:2B:23:B2:D5:BB:76:74:D8:D5:26:E5:E7:9F:2D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: workshopcommunityvoteshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uv=mqu7zjy7-pl5tbjhq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1183fb8fbab2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21072,"size_decoded":9719,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (21072), with no line terminators","md5":"01ae1ba0d0a96679b2b16c472d7cf757","sha1":"b40b862d37e1de03cf16de06b77987c623f4d41b","sha256":"0512d510bea6573b31a737a2a21477d6328d567cfc56a02ab7eeb366e00b63b4","sha512":"0bff747188b04d83f27fe65b15bc77b49ad480c6f2a5b18f310a392a3e4b7c6f82c1ad6f86edcc35ff95ec8709190838a772b79a9ecc7a2513a5d4e3790e8d41","ssdeep":"384:/Gv3dO4U8+AIvIpZjfcAO8T2WIjQBpaawzuig9z76g3CXYmJB:/GnDtPZpwzuLig3OB","tlshash":"2492a7ab36d9f069437161f5045be0cbb26e9964b064396cd120e4f8bc70bc972badcc","first_seen":"2026-06-26T00:40:44.914829Z","last_seen":"2026-06-26T01:02:31.475198Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]}},{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/3py5ywjp57uf.js","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:51.949Z","timestamp":1782435351949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"workshopcommunityvoteshare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 19:31:38 GMT","end":"Sun, 20 Sep 2026 20:30:18 GMT"},"fingerprint":{"sha1":"14:5D:A5:62:EA:71:8D:7B:4B:6F:0E:18:6B:0B:73:B2:A1:26:ED:23","sha256":"83:14:F8:AE:05:50:A5:68:91:84:7F:E7:0D:87:95:96:54:F7:2B:23:B2:D5:BB:76:74:D8:D5:26:E5:E7:9F:2D"}}},"request":{"raw":"GET /3py5ywjp57uf.js HTTP/1.1\r\nHost: workshopcommunityvoteshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://workshopcommunityvoteshare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 23:16:32 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a3b13d0-12620c\"\r\nexpires: Sat, 27 Jun 2026 00:55:51 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RC1%2BdykxzBfWLm6gqJyHugAe16LIP%2BPc%2BU37BcfSafuJlHrk%2BGMrLkWvJpagHzlvwxXi%2BJmFzgYJa6tXiVJ5L9EzXUjU4zd4uasufKnwG38i2upQ4q0YkNd8M2I7lJ%2FAim%2BpHruK6Q7HfKHQHq47%2FlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1183fb5bb802efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204748,"size_decoded":457979,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a700d53a8fa79a3a90104e8567d916f8","sha1":"2d2d90845747c9224101ab18bc5d302a9118c0e1","sha256":"fa79d526327044c9d23d851bba7d807722d190a880a5f59aedd5a2751e16718d","sha512":"8d4bd30c6acedbcd71dd63f639584b27fc8a8382f3c18a105046b3d532e0f0e3270b97cf3f4a7837213579a84c1e7cd5acb151554d6a0a81c4c98923d61fc0c8","ssdeep":"12288:vjtiXpSqzk2qIFe+JUWs34LBpiancuUSH/Cufad919u3VaI:Qk+Jjsy1cuUGCN3Q","tlshash":"9e3519b06b80f6ac031b4f66b71bf1d4fd56089fa9484cdab950fc547daae01e5e81b0","first_seen":"2026-06-25T23:25:06.067037Z","last_seen":"2026-06-26T00:56:25.19418Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]}},{"url":{"schema":"https","addr":"birdsandolphins.com/cbfdhkghedqsctdrk","fqdn":"birdsandolphins.com","domain":"birdsandolphins.com","tld":"com"},"ip":{"addr":"104.21.31.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.885Z","timestamp":1782435352885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birdsandolphins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:18:38 GMT","end":"Wed, 12 Aug 2026 11:18:37 GMT"},"fingerprint":{"sha1":"EF:D5:F1:2E:5A:5B:92:07:BC:54:DC:D6:6C:42:9B:72:09:B0:6A:F5","sha256":"43:F8:D5:AC:80:22:DA:C2:AC:D8:4F:77:83:BD:12:B0:C4:D5:29:ED:AE:7B:FC:6F:FC:C3:35:3F:73:3A:83:F7"}}},"request":{"raw":"OPTIONS /cbfdhkghedqsctdrk HTTP/1.1\r\nHost: birdsandolphins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://workshopcommunityvoteshare.com/\r\nOrigin: https://workshopcommunityvoteshare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiqyO8Pi3d3eeaxBxFGRoIX5Zgc%2FLb853%2FMt7gFvxF%2FS1o%2BdrJt6BRdha3N7AJ981OFSbszqeb%2FlT6cF15kjBy4e9oaxiaiGtIzQmf8mc202fa69qIqKHQLETjID3EyFMu3%2FvJow\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1183fbb8ec856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":708,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T06:34:31.380002Z","times_seen":16754249,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birdsandolphins.com/dtununjsdogvigcbiqmptpfknwragewlpxjfiwhduvtypn","fqdn":"birdsandolphins.com","domain":"birdsandolphins.com","tld":"com"},"ip":{"addr":"104.21.31.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.440Z","timestamp":1782435352440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birdsandolphins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:18:38 GMT","end":"Wed, 12 Aug 2026 11:18:37 GMT"},"fingerprint":{"sha1":"EF:D5:F1:2E:5A:5B:92:07:BC:54:DC:D6:6C:42:9B:72:09:B0:6A:F5","sha256":"43:F8:D5:AC:80:22:DA:C2:AC:D8:4F:77:83:BD:12:B0:C4:D5:29:ED:AE:7B:FC:6F:FC:C3:35:3F:73:3A:83:F7"}}},"request":{"raw":"POST /dtununjsdogvigcbiqmptpfknwragewlpxjfiwhduvtypn HTTP/1.1\r\nHost: birdsandolphins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 72\r\nOrigin: https://workshopcommunityvoteshare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://workshopcommunityvoteshare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\netag: W/\"43-JVpcBwV1WOimdReP4LFbvTABS1E\"\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKazb2wZW4kEMUV5GfknJj7qOrzIGsCekIa51%2Bk1gIoLXgTMeJCwolMNOPrQOcHa2q9Hv%2FZHPJ1wmdkPfpFHdJV4SCeBX5vRLaOfuSpkhTJXuVpcnCZUFhM0kNCytK4iYUnq7gCA\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1183fb95ebd56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":67,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5bda7461dd82ac622532b6f1f7704453","sha1":"255a5c07057558e8a675178fe0b15bbd30014b51","sha256":"f813454f232cc310a469f5601d13d71df55a122db9ddd2b178c3fb8b9a063e27","sha512":"b711afd55ebd632b6eab37859d4bb4de93935c69709b6384c1341685ed7f7c2e7c24f44b1b94b345e5a75df2e2ec3b6744e1a0a1e29ae5ff8a38a1d7439e71f6","ssdeep":"","tlshash":"74a00285855075fd8a13190cc34d6e010f7c14276ad464c6f40c0e8c51f546b9526233","first_seen":"2026-06-26T00:56:20.216579Z","last_seen":"2026-06-26T00:56:25.19115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.449Z","timestamp":1782435352449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"workshopcommunityvoteshare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 19:31:38 GMT","end":"Sun, 20 Sep 2026 20:30:18 GMT"},"fingerprint":{"sha1":"14:5D:A5:62:EA:71:8D:7B:4B:6F:0E:18:6B:0B:73:B2:A1:26:ED:23","sha256":"83:14:F8:AE:05:50:A5:68:91:84:7F:E7:0D:87:95:96:54:F7:2B:23:B2:D5:BB:76:74:D8:D5:26:E5:E7:9F:2D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: workshopcommunityvoteshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uv=mqu7zjy7-pl5tbjhq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\nserver: cloudflare\r\ncf-ray: a1183fb8dba82efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T06:34:31.380002Z","times_seen":16754249,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]}},{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.6499179197184158:1782432038:mUtN5hqEm4tJeDxqzmNAu_HMCYk1-7Fyoy8DnZQfh7k/a1183fb3fb402efa","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.552Z","timestamp":1782435352552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"workshopcommunityvoteshare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 19:31:38 GMT","end":"Sun, 20 Sep 2026 20:30:18 GMT"},"fingerprint":{"sha1":"14:5D:A5:62:EA:71:8D:7B:4B:6F:0E:18:6B:0B:73:B2:A1:26:ED:23","sha256":"83:14:F8:AE:05:50:A5:68:91:84:7F:E7:0D:87:95:96:54:F7:2B:23:B2:D5:BB:76:74:D8:D5:26:E5:E7:9F:2D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.6499179197184158:1782432038:mUtN5hqEm4tJeDxqzmNAu_HMCYk1-7Fyoy8DnZQfh7k/a1183fb3fb402efa HTTP/1.1\r\nHost: workshopcommunityvoteshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13272\r\nOrigin: https://workshopcommunityvoteshare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://workshopcommunityvoteshare.com/\r\nCookie: uv=mqu7zjy7-pl5tbjhq\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 15v9KMl418kuostps0W9+U9nj9ceeLM1FULQjnPHXEzx7TQSSQikq8Kht3UkBdsslauPW8mGRuflme89Z/vGIp1NFpG8QTzyRdvw8XuXkg2fnrlQSj7bN6QCpROkHylx5Ei/GL9mk+KNDnHozeAAh6vUzgniGO2xECK0iiJMLxtnW210iPqM8yPujsqAbu5dsYb1e8GCZih9SnUX5BXoGQKATaORkNv087m3lmFwpd/OQFaOclZTH2/RK4uLuPRGjAk6GPIRlIG1ucCDjM/Cgw==$2fZrxMAFuEv6VcFm2g9miQ==\r\nset-cookie: cf_clearance=NQYRhrXHt0vEmDr5f1OUfdwhU_fCRx_YHkc9qKzVfEA-1782435352-1.2.1.1-VPa2OAY4.99_aon7Tgy5pU6Fel0P57d83R5fnygl.9BPERY8Q2GhauxWM6MCnqla3ViEOHmkozUS_Xdb7qrBvyMK5JJ4K4BT3wnYQAsFQk0.yxnF0UH.ZOFtmVDsez2R5aDjfm4rczmAMK31rD6ae3hCYDuenXPDaGtK739BENyfUqdSHj3rjah8go6puri8.P6K1B3TAviiV08XDgWL3VIlPCrYgef3HIrC7pqqSMd7ZBKe7JByG3sLYWjOafC86Y8NOh6hDyxXt4TR3SOsWw6WmkZG3wWA1lDlYTLlyrvDv.sblxvxbZUP6q4e2zCeGvYyvJhtZ52sdxcqhbJ2Zw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=workshopcommunityvoteshare.com; Expires=Sat, 26 Jun 2027 00:55:52 GMT\r\ntiming-allow-origin: https://workshopcommunityvoteshare.com\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1183fb97bbb2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15135,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T06:34:31.380002Z","times_seen":16754249,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]}},{"url":{"schema":"https","addr":"workshopcommunityvoteshare.com/","fqdn":"workshopcommunityvoteshare.com","domain":"workshopcommunityvoteshare.com","tld":"com"},"ip":{"addr":"104.21.68.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-26T00:55:51.628Z","timestamp":1782435351628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"workshopcommunityvoteshare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 19:31:38 GMT","end":"Sun, 20 Sep 2026 20:30:18 GMT"},"fingerprint":{"sha1":"14:5D:A5:62:EA:71:8D:7B:4B:6F:0E:18:6B:0B:73:B2:A1:26:ED:23","sha256":"83:14:F8:AE:05:50:A5:68:91:84:7F:E7:0D:87:95:96:54:F7:2B:23:B2:D5:BB:76:74:D8:D5:26:E5:E7:9F:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: workshopcommunityvoteshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 00:55:51 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Tue, 23 Jun 2026 23:16:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIp7HDxtMErnwz4FljmXMpeDJhl3BuUeEt24Z0Ub%2B6Dz2hu385%2B0JLjvO9Fp005grG1JlAZvxUmpbWY%2B4TxLeLQwk448irVHic0XeqPacToX4XQWKBPXtJqlogpQdOQQObp1H0PD12vEUmrZ0CBJL6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a1183fb3fb402efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52714,"size_decoded":31839,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (51411), with CRLF line terminators","md5":"59891a39b342a3ff6a308417be98f0c2","sha1":"543d977db4c46514bff73efd7b3a597da0d51ed6","sha256":"cc1b32ab2bb8a76dbac1b50c30ba5a81d7ba6c6e14d610c69097afa3200ac417","sha512":"2c59699681c537b2c0903bacb3231019e890bb055db46fb7f3187a0019566104b009e0d33e0385114581127b1a281fc4843d5f52a123c2894ec0f90aeab1bac1","ssdeep":"1536:4G9/ngwT22Cjfr6h1ZDHa5KQyRPBXy1Ufx/h:t1gwaf6dEURoUh","tlshash":"1733d17076a0591cdfdf8b7a89915e501e379cdbf847e454e32e348a8a40ee3e9dc280","first_seen":"2026-06-26T00:56:20.219078Z","last_seen":"2026-06-26T00:56:20.219078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":27,"connect":14,"send":0,"wait":68,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"workshopcommunityvoteshare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Steam","verdict":"phishing","severity":"high","comment":"","tags":["phishing","steam","gaming"],"meta":null}]}},{"url":{"schema":"https","addr":"birdsandolphins.com/dtununjsdogvigcbiqmptpfknwragewlpxjfiwhduvtypn","fqdn":"birdsandolphins.com","domain":"birdsandolphins.com","tld":"com"},"ip":{"addr":"104.21.31.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.447Z","timestamp":1782435352447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birdsandolphins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:18:38 GMT","end":"Wed, 12 Aug 2026 11:18:37 GMT"},"fingerprint":{"sha1":"EF:D5:F1:2E:5A:5B:92:07:BC:54:DC:D6:6C:42:9B:72:09:B0:6A:F5","sha256":"43:F8:D5:AC:80:22:DA:C2:AC:D8:4F:77:83:BD:12:B0:C4:D5:29:ED:AE:7B:FC:6F:FC:C3:35:3F:73:3A:83:F7"}}},"request":{"raw":"OPTIONS /dtununjsdogvigcbiqmptpfknwragewlpxjfiwhduvtypn HTTP/1.1\r\nHost: birdsandolphins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://workshopcommunityvoteshare.com/\r\nOrigin: https://workshopcommunityvoteshare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nvnt0i7dvKhpsEVhmbjNy8g1l2%2FHxQ7Q8pw7xEA5chhAzaAe3egzsR4UL2L%2BcFd%2FBxopAH%2F7Y4siFNEXIE%2FJdo%2F4l5jkw0Z2bWusafSN2Eo875UXnVfAXeGXstk5Wc9KgOdpMnEC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1183fb8eebb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":708,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T06:34:31.380002Z","times_seen":16754249,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birdsandolphins.com/cbfdhkghedqsctdrk","fqdn":"birdsandolphins.com","domain":"birdsandolphins.com","tld":"com"},"ip":{"addr":"104.21.31.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workshopcommunityvoteshare.com/","date":"2026-06-26T00:55:52.883Z","timestamp":1782435352883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birdsandolphins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 11:18:38 GMT","end":"Wed, 12 Aug 2026 11:18:37 GMT"},"fingerprint":{"sha1":"EF:D5:F1:2E:5A:5B:92:07:BC:54:DC:D6:6C:42:9B:72:09:B0:6A:F5","sha256":"43:F8:D5:AC:80:22:DA:C2:AC:D8:4F:77:83:BD:12:B0:C4:D5:29:ED:AE:7B:FC:6F:FC:C3:35:3F:73:3A:83:F7"}}},"request":{"raw":"POST /cbfdhkghedqsctdrk HTTP/1.1\r\nHost: birdsandolphins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 217\r\nOrigin: https://workshopcommunityvoteshare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://workshopcommunityvoteshare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\netag: W/\"f-Yt3AUbWOMeGnSd4gLMi2nZ/urcY\"\r\ndate: Fri, 26 Jun 2026 00:55:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDdlRUnV1W%2BZmioVykzTplZNvEx6%2F8GNcoUwSu6FcfRZdnZ8DK273Lg%2FhcpMH%2BAxCr6usFjS4l8jofJ5Ny4yqVCL6r8HtIjtZYxIcMqIxSlZ%2FzjWAfTMPqfvf%2FoMfIy0CryB5Pvz\"}]}\r\ncontent-length: 15\r\ncf-ray: a1183fbbcec956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":790,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5b1726b0f6415d8ff91b131d12f660f","sha1":"62ddc051b58e31e1a749de202cc8b69d9feeadc6","sha256":"43d304d3e1988741f29345d8f823d854245918777b0289807347009fd280f3f9","sha512":"b2e3333339151148ffc072d719c964938fca1ae92688c5f8652b5cf0ad7fca54fb0cd8fcccdf093882f1325e367257bf2ca646e7e3f5dc15abc36ffdf7060224","ssdeep":"","tlshash":"4b6000c03c0cc00000000c3cf00000c03000300c0fcc000c000c0c0000000003f0c30c","first_seen":"2024-08-19T21:31:35.088257Z","last_seen":"2026-06-27T00:01:57.171339Z","times_seen":72,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}