{"report_id":"f37fea6c-36d7-429e-ae1d-1b5c0b4ab3b6","version":0,"status":"done","tags":[],"date":"2026-06-17T20:12:28Z","url":{"schema":"http","addr":"vote-xpmarket.xyz","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"title":"XRP Reward Center | Claim Daily XRPL Rewards - XPMarket","dom":{"size":282599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35282)","md5":"ef5c1dc4570a9bf3dcd9fad44b4ddaf9","sha1":"35175a127f2faaae2c9b223b10990a9d89df62b5","sha256":"407bd0ded48c161bce6e29e9a55d1c90159c1ee0ef3985852eb0ff264ac87ea0","sha512":"0879d53820ae7f6ae3f303c3a37f9d5b605634c6de038f2097eea210847a7a84409bf1f385d6d51afab4ee5fb6626cfee72eb560e5fe6cafa045e0174c3879bd","ssdeep":"3072:Pk4cjA0ExV7rGgzI6ZYJoYv2LoiQafvVhaEfzzeGf6KEzVdmU4:DBvb3q52BNve/KEzVU","tlshash":"1554b67a616122399007ceeb1be0170a52b9d416e517a6ec9b371663cfcbbc35a1730f","dom_hash":"domhash88d547f15bc200031fa9d2d468abb787","first_seen":"2026-06-15T11:50:23.502309Z","last_seen":"2026-06-17T20:12:30.089523Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vote-xpmarket.xyz","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T20:12:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"vote-xpmarket.xyz","ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-15T11:50:20.371625Z","last_seen":"2026-06-15T11:50:20.371625Z","alert_count":18,"request_count":18,"received_data":442943,"sent_data":9323,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xpmarket.com","ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-12","domain_rank":423339,"first_seen":"2019-03-18T13:13:40Z","last_seen":"2026-06-15T11:50:21.032683Z","alert_count":0,"request_count":1,"received_data":1916,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"45d812dd004336a0ca07ae915c9c4d1a","sha1":"452f1f96ba5a62df236ff70ae6e005e36b1edba1","sha256":"89b2180b13725bbd9d802684adc249466a427f0a9d473950edd57ed20af07b93","sha512":"79d1a3fe44ab89d0cedcc717f1bbb0f1dfcbe9c3fa7217b312b39570fb17a6f6037ea297c89a09ee780f5378fb4c8553bfc2ef93a2b3294697508adcc83b3f6e","ssdeep":"","tlshash":"7ff0282a60b1267205b7509adb0fe386fe1000676085d905bd0dc54a1f85fa82ca6a97","size":635,"data":"","first_seen":"2026-06-17T20:12:30.108393Z","last_seen":"2026-06-17T20:12:30.108393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-18T13:06:50.722238Z","times_seen":1991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"45d812dd004336a0ca07ae915c9c4d1a","sha1":"452f1f96ba5a62df236ff70ae6e005e36b1edba1","sha256":"89b2180b13725bbd9d802684adc249466a427f0a9d473950edd57ed20af07b93","sha512":"79d1a3fe44ab89d0cedcc717f1bbb0f1dfcbe9c3fa7217b312b39570fb17a6f6037ea297c89a09ee780f5378fb4c8553bfc2ef93a2b3294697508adcc83b3f6e","ssdeep":"","tlshash":"7ff0282a60b1267205b7509adb0fe386fe1000676085d905bd0dc54a1f85fa82ca6a97","size":635,"data":"","first_seen":"2026-06-17T20:12:30.108393Z","last_seen":"2026-06-17T20:12:30.108393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-18T13:06:50.722238Z","times_seen":1991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vote-xpmarket.xyz/BTC_rvYAfWj5gh67oV6fW32ZzP3Aw4Eubs59B.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.877Z","timestamp":1781727116877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /BTC_rvYAfWj5gh67oV6fW32ZzP3Aw4Eubs59B.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"6bc62e64db2351c5cb40a6074466ebde\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGMh%2BYWMox%2Bomi%2BzWPF3e%2B1iDiDcqo4RvOduEfyM%2FVgWbS5kvLHT5zpvLQCgA7JtZNiJxyn0kKjz4e0cCJYBWLEQYjDI79WmB1L8QCv7NmM%2FW0jr74yM4vuwrtW1NhYk4SI2ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 560\r\ncf-ray: a0d4b4d08aaea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":1279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6bc62e64db2351c5cb40a6074466ebde","sha1":"63222e964084e3be20925361b2497d3b5c26189c","sha256":"8c7d6e0a15d5bae91a57d3d4f03c3f6749726e899180ad819557f85cbb13a4ea","sha512":"b7b3d9c00f6be33b9450673bdfbd7bd18020f49c502d00fc145471814fdf88915887f0d7be1e00cb8d82b37e41441d5ede861cb2f2e160b89b8cfebc0126b90e","ssdeep":"","tlshash":"4bf09627ece84dc8de75dc8c3f2607763281c0360dc394044ae37f9141520453b252c7","first_seen":"2026-06-15T11:50:23.513724Z","last_seen":"2026-08-04T04:45:48.379619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/FUZZY_rhCAT4hRdi2Y9puNdkpMzxrdKa5wkppR62.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.882Z","timestamp":1781727116882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /FUZZY_rhCAT4hRdi2Y9puNdkpMzxrdKa5wkppR62.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"84245957e65a257aa595882d16456d81\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdKw%2FRjyZaBuxp3pHlxcWSpcru%2FjQyGHrscSuVtUSju%2F6JsI7Yxrk%2BpN7v7sUxw1%2B8Qd%2FlJcOEp4GSPMT96mafB9iC7JocRQjqd%2FtraGE2h%2FFWWkOEIScuIgGkSy1UU%2B3B81aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1320\r\ncf-ray: a0d4b4d08ab0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1320,"size_decoded":2046,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84245957e65a257aa595882d16456d81","sha1":"e9e4a42a1437358c3f95c71723c359d07e74ac5a","sha256":"6a63d95dadef1d72f3b0db334375cdc7ada3c6ba76b69e5b6993715bf36d3a14","sha512":"8de0c54fef634804fb95119050720f2cf22091cfa109273030b0cac7d0c716ddfb2e61d8112e33370b2dac63a692d063c47b86b28779d794f379a424d139c008","ssdeep":"","tlshash":"6521a8fa6074432ff8501774bf74d4a895f729a434853a734787f430744766a42209d9","first_seen":"2025-12-02T06:33:44.789363Z","last_seen":"2026-08-04T04:45:48.360631Z","times_seen":6,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/666_rhvf9fe6PP3GC8Bku2Ug7iQPjPDxYZfrxN.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.893Z","timestamp":1781727116893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /666_rhvf9fe6PP3GC8Bku2Ug7iQPjPDxYZfrxN.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"7be5aeffd54cee86a9d7a5bcd5ae0afa\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8duOyiKQ5ifiHRPRNuhnnVVGuP1AML2%2Fy%2BzHGJ%2BfDAw8fv5Xud9UqTGK2oRPOKs79zptGFqI0adTlLEQRieTqcu88I0yZRohOr9%2FIfwcyf9xzjomf3oEqME4deXJuH9Sta%2Bkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d0aab6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15104,"size_decoded":15778,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7be5aeffd54cee86a9d7a5bcd5ae0afa","sha1":"da34bf3be511ffa7180169078e878b5c59d02dfb","sha256":"54f69c6491386226d38e62f63c75c77c00a415b75ac4c0103cd7e4010ef42969","sha512":"c663625a9bfb382e5ac92de57bc046fe8bd4d9ddc0e0953b3b71821faf0c2ed876f0491e6dd5b66f26bf86ff2da751bde14cf7b33f9b3079ced17558839dcb32","ssdeep":"384:HNEskc5ueTZWX+ejXj986ibTi9JjJ7Qexex9BhkkOiLqB5bSu:HS65uy++eja6d7jVQeW/OtTSu","tlshash":"4c62d158243b4d4ac1e3fea3b8bb111bd6300edb870029e3663b8ad610a176521f5e5d","first_seen":"2026-06-15T11:50:23.504557Z","last_seen":"2026-06-17T20:12:30.093336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/favicon-16x16.png","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:57.313Z","timestamp":1781727117313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"467f8ba8680083f92395a1aa4b81a2f2\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5oKHWjFE1Pe16oRhCUAiWl0e0IZbHt7eu1ffOWku1mmmsshvGqLeYY%2FrPBiMe0LXz4P0y5WNaGxmu1yJyN%2Be5M9Omz5Th33JBZGG2yp94WyT61CMQKRt8Juu1SJ7DJljrmshg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 404\r\ncf-ray: a0d4b4d33b5aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1117,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"467f8ba8680083f92395a1aa4b81a2f2","sha1":"2330bc72de72da2b036efca32517f5578f7c6665","sha256":"293d8ac40fc2c78b481c4031f9186d370c21eb16cb09d190cfc6f1b078b46b70","sha512":"726516e4f5b75740e6c411b48130f776b65c207ab31fe2a0d60d30783447e2659395d4935487038f9b2e0540a5b62d914999b4ef4cd280c6fea898427d7287ea","ssdeep":"","tlshash":"f6e0c0deff74fa788c8800374dc822ebdf3d81d54484440fdb1441704d34a9890e2687","first_seen":"2023-09-19T22:48:48Z","last_seen":"2026-08-04T04:29:23.756798Z","times_seen":8,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:11:55.621Z","timestamp":1781727115621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPLYk2mNXHWdk6MjrBVCrx4K6o0NUS9sV4It5Ygqz3EXlBX4H6ou2mYPxpoNr6bnp82LBsxdNKZxENW4VX1ayxbJjAXdW7nzo1N%2FYnhLFrADeyUOehl%2FfeyZn%2BgeavP3sBPWYw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4c9287aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285839,"size_decoded":41280,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35267)","md5":"521a9275139d9cd3dacebc2ff219019f","sha1":"13b3226e0ab371c46d43e3c98ac77d97af6c1c36","sha256":"212cc491469e0bfc10977e665c74c49fb8c21f0a812c2ce79a674a3f0846e4ef","sha512":"a9e809426a964e955e458d80cdcaa46584f3fb55bb9a32349ffb061fccfb0b49cda41bb5e69ce0471c42ed6e01a297e7b86fb46504ddb8456b62f92903fa43ee","ssdeep":"3072:zk4cjA0ExV7rGgzI6ZYJoYv2LoiQafvVhaEfzZe013HA4y4mUJ:fBvb3q52BNVegHA4yw","tlshash":"8554c67a516122399007ceeb1be0170a52b9d406e917a6ec9b771663cfcbbc35a1730f","first_seen":"2026-06-15T11:50:23.505428Z","last_seen":"2026-06-17T20:12:30.095718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":64,"connect":18,"send":0,"wait":489,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/3dc379dc9b5dec12-s.p.woff2","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.836Z","timestamp":1781727116836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/f2d3b3dfcc9ca958.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f544d77b0e9b284f5c9f06c0905d9f41\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2B%2F1uy0v%2F%2BBkYLsaqqPdN%2BxCtBytuqHO21HbwZ9AzdxVePFJ5R3nHb8tSLkRlrrYO5%2F8N5Cdz6kjcgpTNnZbZbLyiMrY0K2SQ%2B%2BDekJvlDqLdwU4R43v3PMiFqGW8sxyW%2FraxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d03a9aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":25925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-19T08:44:23.192089Z","times_seen":881,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/3dc379dc9b5dec12-s.p.woff2","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.843Z","timestamp":1781727116843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/f2d3b3dfcc9ca958.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f544d77b0e9b284f5c9f06c0905d9f41\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV%2BhYLVNWonOapebSqog90iIeGZKOhyNz8GW7lS8gUQzhobBXIseOY%2B%2BgQkIwlrEbzQpfUyIvuHMts9EYSVFCGo0fZRhfk1Te5apvdeM3a%2BHDEDUWrhH3Df9PtZhMtXNZmggxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d04aa2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":25922,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-19T08:44:23.192089Z","times_seen":881,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/RLUSD_rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.873Z","timestamp":1781727116873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /RLUSD_rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"a5ca157b877d2953ba24589476348de9\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0cu5ZASIhnuFXmMKS4krXGGIJeG9%2BKtj9X9%2B7VGOpjgj%2Fx5GLwCzaO%2FmxY1VHaAdfP1LXiHaDrnDXXH4hzePS%2B3KrYt9Ekio6TD2P6lRqYnRzFTnzw%2Fo9bj8PBmOz6IoheezA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d07aada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4242,"size_decoded":4918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5ca157b877d2953ba24589476348de9","sha1":"9352b5d5a5393b4f2c2605b311845c832d1e0f7e","sha256":"06b0d4038ecfe86af228414176447d7dc2a70863b7e4c2b8feabb7ab082bc2cb","sha512":"d0697697f471cf2e2dabfccc8dbfbcb287b88740237f22938f2c38db01519e665fe0786c3c68bf3234d5fd61d6a2b64b0690b3930249b20c29b374ba14d7094a","ssdeep":"96:eeX+0v4b7mu8Iy/8APN/F9Mv3BKcVEsxLPJ8jluAE4OSmi:eiWLw8Ar9i3BKqEsxLh8IAE4OSP","tlshash":"b9918d45ab7f48a162cd509ded7293b3474be07b6126c3ec4e9e60f400a12af05a438b","first_seen":"2025-12-02T06:33:44.804425Z","last_seen":"2026-08-04T04:45:48.388965Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/ETH_rcA8X3TVMST1n3CJeAdGk1RdRCHii7N2h.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.888Z","timestamp":1781727116888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /ETH_rcA8X3TVMST1n3CJeAdGk1RdRCHii7N2h.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"b541748ceb2e104f7d97b65128ceb43a\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfOZT0MhygsKPGSRDkTVT1ZOecJtriybOaF37clK%2FuxFwp6Gryq1cY6LiPNlXfnS4mEa7CsLRoSOmZQI36mjHB7xEitk0IVsM7Ik32GDMv%2FkOzYymhKg3ph%2BhmLSKTNVDiBsAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 452\r\ncf-ray: a0d4b4d09ab3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1165,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b541748ceb2e104f7d97b65128ceb43a","sha1":"619499e33dbd2c4e36bbc9b22c1840c9cb96adcf","sha256":"a893fcd3b2e1b81d3a84bd494ed9224aab40e369164aadaf2b913048ff840953","sha512":"2ea93d810ae5a21faa29ea4a6e411454b66ab57a97b72691c58e1843abdc0627671b7c2b70c18005fd5d3f4924feb2ee94acf015adef1b13c2b4b71953e553c3","ssdeep":"","tlshash":"cff0dc6580993c20411310246ca5220bbc3ce8a7264a15ebf8eb9476462d121bef88ec","first_seen":"2026-06-15T11:50:23.509455Z","last_seen":"2026-06-17T20:12:30.098466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpmarket.com/images/favicon/apple-touch-icon.png","fqdn":"xpmarket.com","domain":"xpmarket.com","tld":"com"},"ip":{"addr":"172.66.43.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:57.312Z","timestamp":1781727117312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpmarket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:48:04 GMT","end":"Wed, 26 Aug 2026 23:47:53 GMT"},"fingerprint":{"sha1":"EC:11:35:D3:16:CD:7D:61:2E:25:FF:1A:86:96:CE:BD:9C:60:08:CB","sha256":"90:BE:F6:2C:3B:50:99:92:D6:46:30:DF:EE:E6:7D:41:7D:AE:A2:55:50:CF:A5:CB:4F:F9:46:50:E5:51:5A:09"}}},"request":{"raw":"GET /images/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: xpmarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 20:12:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 791\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://xpmarket.com/llms.txt\u003e; rel=\"ai-index\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 26 May 2026 18:16:02 GMT\r\netag: W/\"48b-19e658039e6\"\r\nage: 99259\r\npriority: u=4;i=?0,cf-chb=(122;u=4;i=?0)\r\ncf-polished: webp_bigger\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-bgj: imgq:85,h2pri\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHkHcvyogx29giGAP4%2F%2FjFn%2B1ZJAKlzHV%2Be%2BguE5KZsDg0cw%2FF6kZcLyDdDuw6ET8r3mRPv8D2%2FP4ij2vdfYQdmBiA37pQBWKJZ%2FiZSNNKXXAGlHMhQSqmkqmF98sQ%3D%3D\"}]}\r\ncf-ray: a0d4b4e71d5f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":791,"size_decoded":1916,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"30c94534e1ab7f944b635bd86d2adb7f","sha1":"15ba50806db073c0e2209c923d07b9056f4ca8f5","sha256":"99a8a7b6220a61441b4c0cb0c1dc5707272eb7fa71f0e443000535a3e7aac436","sha512":"f3d4b18c28bb4f2c9c1091172c9376929a5c39b52ab626d3415779355ea9f1d83ba51e7709929082782b93e4636bb8d396911888cc35a56d0fec1af83db145e7","ssdeep":"","tlshash":"2601baf3a665ac8ad0737451f9b5ccd307ab263047b2e84bc5c364cc6a555d0c507b1b","first_seen":"2026-04-14T16:35:28.702935Z","last_seen":"2026-08-04T04:45:48.358819Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3202,"timings":{"blocked":-1,"dns":12,"connect":3,"send":0,"wait":27,"receive":2,"ssl":3157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/3dc379dc9b5dec12-s.p.woff2","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.838Z","timestamp":1781727116838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/f2d3b3dfcc9ca958.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f544d77b0e9b284f5c9f06c0905d9f41\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mca8TSfspXkht8JyJhE8lfgxc08meQ3n6l7N8mb6N7RVCdUe1A6uArLAEN63zgt660TKBaCVolDevK35uN1M5owNs3fZC2o9uo0409Gt0x5HEo4cydHgnago8z1AJAwI1IJJMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d04a9ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":25914,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-19T08:44:23.192089Z","times_seen":881,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/PHNIX_rDFXbW2ZZCG5WgPtqwNiA2xZokLMm9ivmN.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.885Z","timestamp":1781727116885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /PHNIX_rDFXbW2ZZCG5WgPtqwNiA2xZokLMm9ivmN.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"6e41f3fcbe6b5c1992a17cf8f5d59931\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpaPPpejnK1Li%2BJ54pdX%2FO4Bb1zhj6LvZ1OL9Spjqw%2FAQoKgtSDVn%2BrG00DGluzKyC4xQ6XY9WAiQ66nhG11PZmHWTIpZ85GNFzH1Qvvi4ovUnlw5nUpAvcbD%2F8mMlOgkW23IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d08ab1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":1776,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e41f3fcbe6b5c1992a17cf8f5d59931","sha1":"41b8c79c53f36c04b85960fe000539563f6b15f3","sha256":"1346e4f90f9e1fb5f0ea25916da3e29f89b10c56bb33479ed449307659973e87","sha512":"ccc7c9c8b8f62c59f4939166e8c188c6633761b96b000eeaccfc954b408605d5f8d05250e202c7c0262f44b4e490c5f3f139d28c4420dce87d4e748937e437dd","ssdeep":"","tlshash":"0711b610ef7482c18b18d39c99ff146a18ee5ebd47bfd34462ab28c8f9723121140895","first_seen":"2025-12-02T06:33:44.681733Z","last_seen":"2026-08-04T04:45:48.382912Z","times_seen":6,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/USDC_rGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.891Z","timestamp":1781727116891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /USDC_rGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"da62f75d58c2ea850c7f958a2850640f\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmnAjVYs%2BAvZluPHdVQtmXtsIJN5OChf7kLWCA9%2F7E%2Bp%2FEG8Tx%2BRFqFfNbXhmx0fAmq79nV%2F50Xt%2Fy3KTo%2F3zXzCi4h1%2BkrcH9OoNWG%2Bvg%2BdonmIrX%2B35T7EbkSMJvjJvmV2fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d09ab4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2290,"size_decoded":2978,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da62f75d58c2ea850c7f958a2850640f","sha1":"f4188f297aeba26ac8f5b63a485622a85e858c92","sha256":"fe42957f388b0c34a80513af523fcb75a6b952bf7fb31c741224da5b8661d84f","sha512":"fced5727621f3f3e9bb8657df9d3e90c61132ab912baeba1155529e3f4c003ac67bbd75c893241fddc3a5ecf7d8a9bdefee3605e49e2072af3d7a1aeb544ee79","ssdeep":"","tlshash":"6e41193b7c6ce0a84a8c9e72c3a27539eee57835d95b486c95413e0528c14d35abe89c","first_seen":"2026-06-15T11:50:23.512858Z","last_seen":"2026-08-04T04:45:48.377467Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/CNY_rKiCet8SdvWxPXnAgYarFUXMh1zCPz432Y.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.895Z","timestamp":1781727116895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /CNY_rKiCet8SdvWxPXnAgYarFUXMh1zCPz432Y.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"9b02471d74d7691f4ecf1ea0d7dc9dbd\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lavJw%2B6ROmzgVY8wIVgwjPQ%2BcRajj8%2FDWNswPPNbm9l%2BB9tpa64P2oeRbjtGoD3OT2e8C4I9D8w%2Fi5Qnwq1sDfCaLrEp%2B0LCLAPnTnMQKLoVK%2F0zpQQXJXOFiNzxg1l5d5oFvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d0aab7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3170,"size_decoded":3851,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b02471d74d7691f4ecf1ea0d7dc9dbd","sha1":"9be0517a6e9744d72e0d7fd707958417b5684529","sha256":"57b4940d5c3dfa99069ad8cea9a19883fba47feda64988203874a19b4fde0300","sha512":"64b1c3274d3dc7db4a16648127a0421e60c0e72992b3f726b6be75434b07a4a732303f18a95cd983584d99c79d01fe650010e2c932f19395adb0fae9fcc5a7c1","ssdeep":"","tlshash":"65513b74347f1988d22bddd51f2d0eba0e2f1150af1824ca466d07ec7c08f5a8e9a1ee","first_seen":"2026-06-15T11:50:23.510323Z","last_seen":"2026-08-04T04:45:48.349689Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/ARMY_rGG3wQ4kUzd7Jnmk1n5NWPZjjut62kCBfC.webp","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.897Z","timestamp":1781727116897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /ARMY_rGG3wQ4kUzd7Jnmk1n5NWPZjjut62kCBfC.webp HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"c9d52964a7f7df3bc6773a4e6f30e86e\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:57 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvKkvJF3mdQj0ly5dWmikgdiXNsSfTKzeukhpl4dm58ykLWbmHsnLXwZILHbYSB4mO7sohastmmGrKWjJFVVSKCr5Zp2MK83JnAgp%2BRlNbx6pi8kS232pwug%2Ff7SaYklH34XxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d0aab8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1800,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9d52964a7f7df3bc6773a4e6f30e86e","sha1":"895c5f9dc436b8ab787054c5e28168ea49bd5aaa","sha256":"29811d39b0093057ebe6c0ae242010c17f00b96a20962728341919c9ebe4db93","sha512":"d9a4e019c3c9fe02056dfa594307b018a246140e0f784606f8f88122bccbae17737a03fd33456a289ba41cfa2e2f3c8958f95e8bedf3e517f91b3694f0564a40","ssdeep":"","tlshash":"3621ca55bea4172d8210f33c8e0460b417ac6ea40d4a9e4aa52e2d940b9f0a3b68c875","first_seen":"2025-12-02T06:33:44.708144Z","last_seen":"2026-08-04T04:45:48.357388Z","times_seen":6,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/assets/mesh-buildsignal.js","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.449Z","timestamp":1781727116449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /assets/mesh-buildsignal.js HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPYJEJ7SA%2BugAPpHsT%2BQPYk2W6gnIAMXB%2FycVdD9JYV0KoXqkU5epFn8qp6%2B%2Bh%2BbSgRhiisgoVOmJBUv0GyNTvSKbzMtqVha%2BS7FmpplBy6sLAjoV9ES8dpQ1L4KF%2FwbBptl8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4cdd9e1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T08:45:00.410605Z","times_seen":17970822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/f2d3b3dfcc9ca958.css","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.455Z","timestamp":1781727116455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /f2d3b3dfcc9ca958.css HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnZEVlPBYZTP2W8FVV9YEKLsWjKu2rcnnyyTlAsiPeD9kOS0Gc63AU0aNdfF1MLolp1LxjCaDfS2SJUsDyhZv4oqyJbI0md6OGg%2Fzu2%2B9cSK92udf0O2iylwQ5z4zd3duE%2BijA%3D%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"edaa74ce315a5dce1ae6541e5c41cbac\"\r\npriority: u=2,i=?0\r\ncf-ray: a0d4b4cdd9e4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9901,"size_decoded":1803,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9901), with no line terminators","md5":"edaa74ce315a5dce1ae6541e5c41cbac","sha1":"9de6a0b31883ebda97c99bc147deb622fc4e4f39","sha256":"1876fba375484b1a5de04626a61f7ee7cd64e9262a24e82c991ce2c885e359fc","sha512":"29bab7ca49e0b2a50555f2e454a2055cc344d6e7f7eef5bf485bef876282ad7e4b4024a94e82942b0ef159375ae1454c3268c48218b0c0011288fa80fc6524d6","ssdeep":"96:JplH47pgH4qpTH4Jp+H4wyrp/H42plH4opwH402yH4cH4ep9H4VZpQH48e0pvH4r:pYyYMYCY5Y8YDYwYcYcYVEYsYr","tlshash":"5a126b30402d905ed571bdd231ca7f132d3d60199ae84923da2915bd8edbcba73e0bac","first_seen":"2026-02-20T16:33:19.940387Z","last_seen":"2026-06-17T20:12:30.10643Z","times_seen":10,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/30ed0e4cd604b851.css","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.457Z","timestamp":1781727116457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /30ed0e4cd604b851.css HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mp%2BmMUlDPnaafGZTejU%2BgjGWoPvfIz7yusmx1sNaPFa8WbN%2FaNrvvmWc6nlTSgQ68ZRrgftfQ2ghC9UxGSA7Ec6C68t%2BxoN4IkLNifml8ZJMCRKDdrd5Fw%2B63oHFhXajTpkEUg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"2aa331ee72e7d79c8b8f54ee0b7d43be\"\r\ncf-ray: a0d4b4cde9eaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4181,"size_decoded":1912,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4181), with no line terminators","md5":"2aa331ee72e7d79c8b8f54ee0b7d43be","sha1":"95bc213cfd8bad256bc49ec43538c16777f1e0e9","sha256":"d47b11fafbd921b8dadc164dc4e27c2814e8706d7927ae38a9a8d42563b4a562","sha512":"423f73d0771098e6ac5fa7582cdadd00f748a99712ee9fb94f84f20f7431f59096f7dc221dc7c247921f908d1dbde4cd0a59e4d21315c159081f74db6f352beb","ssdeep":"48:sv9URP2352gmpCd8g0+71zH1f5LpSFSme+jeBhIOXIWI4mEuL/onA9/85Hg75+mF:OJToi95dKSme+jeHoaapU3Eyw06","tlshash":"73816630a3241c2791378f285784e7bd63e884618bd3892ad795ae3cdbfd8f5114e782","first_seen":"2026-02-20T16:33:19.939045Z","last_seen":"2026-06-17T20:12:30.107756Z","times_seen":13,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote-xpmarket.xyz/3dc379dc9b5dec12-s.p.woff2","fqdn":"vote-xpmarket.xyz","domain":"vote-xpmarket.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vote-xpmarket.xyz/","date":"2026-06-17T20:11:56.841Z","timestamp":1781727116841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote-xpmarket.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 14:13:08 GMT","end":"Sun, 06 Sep 2026 15:11:37 GMT"},"fingerprint":{"sha1":"B1:C6:3C:63:27:AB:AB:76:8B:E0:7E:1B:11:5C:76:4E:F1:4B:92:03","sha256":"85:CE:76:02:B6:03:D3:EC:57:C6:D0:C9:4F:2C:F0:90:2E:F8:76:E3:0B:8E:84:36:B9:F7:A5:C7:C1:B9:5D:0B"}}},"request":{"raw":"GET /3dc379dc9b5dec12-s.p.woff2 HTTP/1.1\r\nHost: vote-xpmarket.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote-xpmarket.xyz/f2d3b3dfcc9ca958.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f544d77b0e9b284f5c9f06c0905d9f41\"\r\nlast-modified: Mon, 08 Jun 2026 14:53:42 GMT\r\ndate: Wed, 17 Jun 2026 20:11:56 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0y5oZrsbTucMKh09qvgNwPn1Vu%2FdQVUf7dbGClBLpWPFhTks1iBXL1%2FZrfVh%2FvXCM7lxp0hEpOtvpYJa2z8aqPiEwseZGNuy5Gpskc8fh9yzZ5Y0H4I8nc4LQtnxHbqoVvdtLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d4b4d04aa1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":25920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-08-19T08:44:23.192089Z","times_seen":881,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"vote-xpmarket.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}