{"report_id":"fde06c17-b176-4ead-89e8-90eaa5e5635b","version":6,"status":"done","tags":[],"date":"2026-01-20T01:57:07Z","url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"172.67.209.169","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"title":"Moonshot vote - All Chains","dom":{"size":53599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363)","md5":"0fbc5d3e9859359c007d5db350c32b0f","sha1":"3d81bac3423ee25a4f922ad344cfe8810fae5f34","sha256":"9e0de516b5a39ff4f41351f8e5e64e9d4b7d4074fb174f97ae89d94f520d998c","sha512":"943b8df8243b5115e0d80bc6df2bd6ed0104afeaf34eee5dfb51e17be3e4993270b02ea38b8597ba7267ab437ad58a9b226645c8e24c9c991f14b17008e1b99d","ssdeep":"768:inJD4Ei6PQlKwlTPm3lP7cChBVJCUV2bEHsczoNbZYmUPQL3GC4QdLmwcik:iJM8WolztnUbEHwN9Ym/4Qd62k","tlshash":"2833f9e1a6f13024215394966a87860a3314e443e90fdd697fbc91c89fc6feadd73788","dom_hash":"domhash5e05a6872fc0240def4bcf0a819f33d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"172.67.209.169","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T01:57:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"moonshot-vote.click","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-06","domain_rank":0,"first_seen":"2026-01-20T01:57:08.039537Z","last_seen":"2026-01-20T01:57:08.039537Z","alert_count":7,"request_count":7,"received_data":700214,"sent_data":3339,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-18T23:20:15.877736Z","alert_count":0,"request_count":1,"received_data":161801,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4de2987aaeea29d8d92c027814255f62","sha1":"4d2f3a569320a0dbd3629d90d84645e1929ff715","sha256":"a15db75da499d13181c82c590cc45e24df1c4254fa74fb0a1ddd8092dd6769f9","sha512":"14c578e575da63044396bacacc481b6d82df199ec7decf1c42150a2b9dafa5ab81aa8fea77114691cc628c25b28ddb5b4a0f2d3fa10fe95a22da324c7e5a3e93","ssdeep":"","tlshash":"0ac02280c1a08d20462c10aa21f4a2c87000383c224274ca8abc488b269ef820648810","size":186,"data":"","first_seen":"2026-01-20T01:57:10.931811Z","last_seen":"2026-01-20T01:57:11.228412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6265e0fdfc33469d7a2685ef9dbe1d90","sha1":"f92f15fb1910349904d5f42408e8d32dc1c2f5b2","sha256":"54e9620f4bb734040cbc05d32f9bb6ac9f79e65a71f7a3ea6be2640df4be0f78","sha512":"aee566c3ec5d6828c29db678d354089adf54dc9a29af93ca6d511258de842404cf908c6025b0766101ef9a7ce60236daa600bb7d00f6086405dbdf29ef351370","ssdeep":"3072:wPlRCBLG+dlL4lui/StxAww9r9bjoO4zm0LF6Q8TRhjXR6B6ahA+:wPbChGAL4lstxAwwnbjoOAm0LF6TTTjw","tlshash":"03f3b6927692f46203f186fa04760402f31a7989398b856cb17ddddb3c9dc8e71b9bb4","size":160941,"data":"","first_seen":"2026-01-02T13:08:19.242513Z","last_seen":"2026-06-05T04:21:00.908253Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/secureproxy?s=%2Fipfs%2FvSuZZ86CtGPE-KTKVkAjIA919aa61b965b5e4668c4ace4180f4da9%3Ft%3D1768874206190","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b33a39fc01f804280e6ba777a02698f","sha1":"71e73dfaf43fd55323ce941c054c393a2692b8e2","sha256":"1d01a3276456544e2055800fe3b628a7c353709bc0375fc2e998a2cdfa352049","sha512":"4f8008fdc3b5f6d1596162071f5ccc1dc84c20f165e74e269eab3c6b1da27e684de42e818729680582d82b739ce6dace48991be1860319f8373d0b17792248be","ssdeep":"6144:FujB8gltIeTM5/S8g6zRhNgDshpTUhRPNZYbRjFHXc0eS2J:ahltVM/g6Zssh4RPN8ROSg","tlshash":"86d4bdc8a798b6b744e0b7a516b3c46fdfcc6d6a430b889ab3c11c94234d70395d6f68","size":607899,"data":"","first_seen":"2026-01-20T01:57:11.224776Z","last_seen":"2026-01-20T01:57:11.224776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ea0fbc84715688419f380e9235f788","sha1":"225615ebd4b7784bea8e2cfef974e8cb26e58d2b","sha256":"4f139f32edd81d65d09270149956e95ac2d810b7f0acd13ae475daaa379d4a5c","sha512":"a9d4db402bb65b6549342c0cdb162208a28742840c9d7131fcabfbf35b627417fbcda1cfd91cab4281756aba350591e8aeb878a2a89ef84b3fcddba8ccf45a61","ssdeep":"384:WAhP/6jcumoNbZYmvMd9spLL3G904MCZxwfnvutd6YLARfaVYf+7EcNUiwqs:WEHsczoNbZYmUPQL3GC4QdLmwci1","tlshash":"75c2a7e666b63015018358960e4b82013214f583be8fec657f6cc5c06f9af69edb3bd9","size":27510,"data":"","first_seen":"2026-01-02T13:08:19.251659Z","last_seen":"2026-01-24T13:52:48.601584Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moonshot-vote.click/assets/footer_apstore.png","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET /assets/footer_apstore.png HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2880\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 14 Jan 2026 10:07:23 GMT\r\netag: \"69676adb-b40\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j1Ctl3lY3xQF%2Fotlv4FnqTEsh8t7jySLcpcdnfY9LnsY1FPZKpuNZ37j3jWoCmHEHme4%2BTdxbfScr7lY62GwtdZ3sFnC%2FeDaT9%2BEpqBLgrAQcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0af50cda18783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2880,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"631648d40f922f1945ef6267eb1ddff4","sha1":"021c29849ea8e437eccb936d00b6cb78c7515c03","sha256":"5016f35f40b650bc38b8262e3bc7201f2e8d879790433bdf34a0461480d2ad76","sha512":"bb1e78b1c4457df1f37149e964d7d4b156edd67b7ce39d432186abc48e365052221cd324919b82dee7f258c6865a537c0eb0111709220ef6e171f0e171c0f689","ssdeep":"","tlshash":"d0513a74630c4328fab72f39799a2b0a236da5f6d74a4a10c18055469018bc1eebdbc3","first_seen":"2026-01-02T13:08:19.244863Z","last_seen":"2026-01-24T13:52:48.583413Z","times_seen":11,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/assets/footer_google.png","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET /assets/footer_google.png HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2892\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 14 Jan 2026 10:07:23 GMT\r\netag: \"69676adb-b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUrYiwaV2IY%2FoaVFwL7igD7cCGwGNhK8pBSKRfQSRkzYNDunwJOnujs3gKj5lYDM6VtGlkW4C13SQQ12Esb3HSaYycHRvr1hTgIBlooi%2FhvHUjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0af50cda19783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2892,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"01cd43b3305709bd63b0d3f75e986924","sha1":"21e15d8aa1f45052fdb02a6f3d1b03a4171c6116","sha256":"421f6b78bf1addc6e1e118ed6d8415fde1a3e0c847072f8f0f317cb186208d35","sha512":"ee69abdb0d35706fe6accb5061bccac5e1990699cd65df27bf7fa37cbdaee5ab16c77ebe5028cd77ec80a81700a62385a406ab1a081754a42e825b7888cbcb62","ssdeep":"","tlshash":"5d512b1113695b29f05219f8e4e40b49db29b83f9c1b0a2ab6d841372340ee4a16d9cf","first_seen":"2026-01-02T13:08:19.240648Z","last_seen":"2026-01-24T13:52:48.588682Z","times_seen":11,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/assets/shot.png","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET /assets/shot.png HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1064\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 14 Jan 2026 10:07:23 GMT\r\netag: \"69676adb-428\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8HR%2FL%2Fz0QbE4rui5b%2BK3pS5Y3oHupsBW9HXnM5JClmQ6o8rrxKJk76qXzCJvBJU25hluZwVNp5AhgocR%2FfqhevCkj1f55lyElTY9v0jm6Opx6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0af50f7ca5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c13ee7992ff73a673bfe0547e1a379af","sha1":"ff059671ca2b841d461a6a3b402021739b4ed124","sha256":"f689be6bed4c1a7eeaf3da6e193689be1fe7ebc04496836cbfef1708993576e1","sha512":"c8e65e282c8dec3013cf3278e7d4572e8c7d742f6b60710db9e92bfda9c77db847e73612fcf730f7ee0e7f69789d0764b7385c95c6a1f7a7124e76f7da297355","ssdeep":"","tlshash":"491184f923b4739cd4382e31b0595b85d3a9296eab4aa2a681808369472c6e65868703","first_seen":"2026-01-02T13:08:19.241598Z","last_seen":"2026-01-24T13:52:48.593512Z","times_seen":11,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T01:56:45.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 14 Jan 2026 10:07:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFjvVuHW60H2c0GchSCS5aoxA32gDy7vnduUNBBilY6bX%2F9GsAOSCpkQ%2Fxcg7ZCKIH5l8IbW1Dfm3deie4h13QiSWqxrFUb7eNDFu%2FFnnU1D\"}]}\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c0af50a4bb75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":52335,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363)","md5":"b1aee0dbaba74a82dbaa9a619a37ced1","sha1":"91dc71cc274d5fbc9c41dbd9315b19301dd779b4","sha256":"31d5f7dd1ec7bfba069f7b8df8883f552dbb0f4757e63c72f067b86f1f9e5f93","sha512":"32486833ce51196b26012a76f3b41e07ea717d3af99aa7e3dc0e9cd7d79965b156febc895eecc2e43d5a9d7db6d93819467fa0387cf9bec5f44cd89091319fe4","ssdeep":"768:wjJD4Ei6PQlKwlTPm3lP75hBVJFUVfbEHsczoNbZYmUPQL3GC4QdLmwcik:wtM8WolzhSZbEHwN9Ym/4Qd62k","tlshash":"b633f8e1a6f13024215394966a47860a3314e443e90fdd297fbc91c89fc6feaddb3788","first_seen":"2026-01-20T01:57:10.925763Z","last_seen":"2026-01-20T01:57:11.217221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":80,"dns":63,"connect":1,"send":0,"wait":222,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/assets/moon.png","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET /assets/moon.png HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 25600\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 14 Jan 2026 10:07:23 GMT\r\netag: \"69676adb-6400\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WzH2grugu2nHksa7i1ChBsbcP6TKerlez1M8rT8FPdKgBYVi%2FQeukVf8lU7CzSAj2ABdnXzQ2R2c%2FAXS%2B5hVE8x8h8n7UOzUE4vhw6ZYK9z8tZw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0af50cda17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25600,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"601c26447218426c6d45c501853ee237","sha1":"b700ff003c1f5b919cecb45a9e5ac7b1898bf2df","sha256":"537032799dd4e554a15bff2ce3e01426adef79c28a84e8ac0886b20d8298951e","sha512":"e454bf4dae0ca567f726cbe84d0c1b866e9a0a8af68c4ccb2c2ecacb5892c11f2cb4ccb939318734c0b93b64ea9a15318d7fece47b199203510d8608929f9657","ssdeep":"768:GT6gauMSVAgw9AQSTFrPJQpDouUtbyn3XA//4SU:/gaOVAnSQSBVCotq3XFp","tlshash":"fcb2d0e219c3cf2bda1665f3173daa22ae9b58d806de130d801856f66323d0b91b5383","first_seen":"2026-01-02T13:08:19.243937Z","last_seen":"2026-01-24T13:52:48.582481Z","times_seen":11,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lightweight-charts@4.1.3/dist/lightweight-charts.standalone.production.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c0af50cfd4b56a8-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 10813493\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 20 Jan 2027 01:56:46 GMT\r\nlast-modified: Thu, 17 Jul 2025 09:19:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:DBRrm/vG5fGdoaDeh22uQwI8My1RV9gvdXX5t2U+5Rk=:\r\nfly-request-id: 01K0BTXGW6S2K26MA56WJPWZ8W-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160943,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65349)","md5":"6265e0fdfc33469d7a2685ef9dbe1d90","sha1":"f92f15fb1910349904d5f42408e8d32dc1c2f5b2","sha256":"54e9620f4bb734040cbc05d32f9bb6ac9f79e65a71f7a3ea6be2640df4be0f78","sha512":"aee566c3ec5d6828c29db678d354089adf54dc9a29af93ca6d511258de842404cf908c6025b0766101ef9a7ce60236daa600bb7d00f6086405dbdf29ef351370","ssdeep":"3072:wPlRCBLG+dlL4lui/StxAww9r9bjoO4zm0LF6Q8TRhjXR6B6ahA+:wPbChGAL4lstxAwwnbjoOAm0LF6TTTjw","tlshash":"03f3b6927692f46203f186fa04760402f31a7989398b856cb17ddddb3c9dc8e71b9bb4","first_seen":"2026-01-02T13:08:19.242513Z","last_seen":"2026-06-05T04:21:00.908253Z","times_seen":21,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":29,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/secureproxy?s=%2Fipfs%2FvSuZZ86CtGPE-KTKVkAjIA919aa61b965b5e4668c4ace4180f4da9%3Ft%3D1768874206190","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:46.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FvSuZZ86CtGPE-KTKVkAjIA919aa61b965b5e4668c4ace4180f4da9%3Ft%3D1768874206190 HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moonshot-vote.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 Jan 2026 01:56:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9469b-cec9+vQ/1VMjzpQcBUw5OiaSuOI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=BpVxL8BpPvDogP9MVteZXg.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/20/2026 01:56:47\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 182181f3f2c7827469dd9e86ccc601fb\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgGJFVobVE%2BiTYtS1AOD4qz6v1%2FyDQQsa5%2Fa7cKeqC70ClS6nlWxVG2mcYpUj92iZ9HNNX1oxXEVtvbqeEQjWAS%2BPSjHnaJcVulE78F%2FnjzF03A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0af50cda20783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":607899,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b33a39fc01f804280e6ba777a02698f","sha1":"71e73dfaf43fd55323ce941c054c393a2692b8e2","sha256":"1d01a3276456544e2055800fe3b628a7c353709bc0375fc2e998a2cdfa352049","sha512":"4f8008fdc3b5f6d1596162071f5ccc1dc84c20f165e74e269eab3c6b1da27e684de42e818729680582d82b739ce6dace48991be1860319f8373d0b17792248be","ssdeep":"6144:FujB8gltIeTM5/S8g6zRhNgDshpTUhRPNZYbRjFHXc0eS2J:ahltVM/g6Zssh4RPN8ROSg","tlshash":"86d4bdc8a798b6b744e0b7a516b3c46fdfcc6d6a430b889ab3c11c94234d70395d6f68","first_seen":"2026-01-20T01:57:11.224776Z","last_seen":"2026-01-20T01:57:11.224776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonshot-vote.click/secureproxy?s=%2Fjmpd%2F","fqdn":"moonshot-vote.click","domain":"moonshot-vote.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moonshot-vote.click/","date":"2026-01-20T01:56:48.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonshot-vote.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:50:28 GMT","end":"Mon, 06 Apr 2026 22:49:06 GMT"},"fingerprint":{"sha1":"4F:FD:89:D1:3E:A9:D5:DE:6E:C2:17:EA:F5:D6:C5:E5:33:07:F0:D4","sha256":"B1:5E:F6:9D:40:B7:64:55:1F:03:6D:A2:45:F2:09:7F:9E:65:9E:52:B5:33:F0:4B:7B:B1:BA:E2:C9:7B:A7:64"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: moonshot-vote.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moonshot-vote.click/\r\ncontent-type: application/json\r\nContent-Length: 1383\r\nOrigin: https://moonshot-vote.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1383,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBAwP6AhIACQDZArMCFQDHAiEAAQACGAMAAO8nhn2XtsKCAWQEK9R_T80UjVC9_moCAABXj1BzUx7Ts5Kny9ad2oI2QCwJgOFKJPnClf3J221rVIB1VuaePou5rrZxJrtt6tJ2Ow53mBUSav3q_MYtv5JuVx3krjoyohyNPwEVj0SAsLwJcgwwG2bCPA-FOX42C5whhn3eXCdbaaSFXjSN1ym7ebA55okqTZkYid9IVEDQToLDCKSxK-HjI6jeIXbFlTnc60UicI9tcDDmrPo1MMtb01MX0TSh4jXTFy76gJkGQPhv0da7AhKQ2QsSHKmJNzlNfSlSq857YaS2MLsjFjAfnoZa3Z70i5-ooWxv9wicrqcyaQiSdnb6YYe6MquwN6ovpLU7Re9Jq6FgtILOtMFP3WjxtpxBNNEWyR1sliRqQeAct2dpTxM_qEtxZSB0-ZwWD0R-cI56njWDCffyRGtxHf_1eKxgVZHryo4vJZmMfQHmjbSM5_LJl3tUk6mwYxWE-NeaCCe6Tez2fI8Uyp1ufRiUgMKQE8IGKsuRU81PXJGfgV_Ol4Gvu-Qc7liH01UZDL2Y4p5yeV1TRbxsDxlGpOniEiYzto07ruFevXdOMaZjhdJDZE99e8LmYHgONdNR7HY67p9Kcb6DFLAw-lDBFt86ym5YFriZcAkteehEJDRU7vWCO_u09bM013uuk4NbjVA4HbyMBiw2gGrPWlicKFwHSV3Dk9VKfkaDYVQhmrwm1nvVtj6FMIn8_ZTGEvW63K1ObKA5MoLRkdeRVSvmBWVxJJutV5ftdtdeTu6Ndf1iMZ-GSepXa9ivu8t9tFg7DVS2sMSZARgD3XG-w73GUszDBR4JHdVKofMLFy67-l8yjDe8CKzA5cEX7YtMMcYkaJBCN3X_AiDF8_tDc6YWYncIA-_V7kZJez41DIpv3q9zc87cBsmNzvxLeugXGdBz--fVeYDxcOMIGpfE8DUWKn2tiUfgUhSlK_wtH8q720ttiRGzwxQI1igENV8RSOyynmHUUy3GQlixVlHFBZZk78K3eNux8aw3LNhqQO8lDipe6jIHFI3VS9R_j1nKO1TtSyH_QFEqvJobQ9yeGLHQOd3OsMfctiaRykk9ysZyuS9q-gfOqzSz9tLGPBJe3RA\",\"proof\":\"eyJpZCI6InZvOFN0OGtPQ25CV2VaMnBuUDZxYUEiLCJub25jZSI6MjEzLCJoYXNoIjoiMDBiMDFiYTFjYjkwZTFhYmZmMzJiZDBlMzUxNTIzZjQyZGE5NjcyOWNkOTFkZDdmNDVmOTQ5ZDE5NmU5MDFhNSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 20 Jan 2026 01:56:49 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9997\r\nx-ratelimit-reset: 1768874268273\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/20/2026 01:56:49\r\ncdn-edgestorageid: 883\r\ncdn-requestid: da20df7a799506288e8cef99e3977572\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sflxUj62qmL64XjjknZ5eMmePf3ETkkPZylUXsYgKG8jZCiNAaCjBLnTFR96R0gxWLcidP%2Bncpi0X8jK8zgNPCZIUk3s%2F1NgQV4vQb%2FjoMVJg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c0af5189d07783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T03:33:43.044231Z","times_seen":16403399,"resource_available":true,"data":null}},"time_used":1239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"moonshot-vote.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}