{"report_id":"ff8632e3-5939-4054-983e-f1b6945e3129","version":0,"status":"done","tags":[],"date":"2026-09-19T08:58:01Z","url":{"schema":"http","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"title":"Vote to List — Powered by Moonshot","dom":{"size":2057464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59387)","md5":"145638b349d728dcc004920a1d434d2c","sha1":"864682cee6d7b7db8d123ed8453b0028e83e004e","sha256":"5659fae41ca719b9220f3f010a249422e13dd117c3d5b164acc76888734a2559","sha512":"6a7482b3a9ec327e610d101b29b535659ca52a94f536b76cc08c29e161c4a633d52224bbe9a1bf5cc6b12213b4f66f1ef8e48d7ab5a69b446a344ccbdcf5f448","ssdeep":"24576:wY2CVdUCEdGms7GxQZ2Dioa7SRuqE58IsibfGEHUM+qyJ6sVEc1DBJhe:oGPc1ioaVbeEEA","tlshash":"e09512713529a83e6e37e4b572edb94c5e01b483ce0892d8b74d62545bcbff289b3508","dom_hash":"domhashde264fcfc5577a7382d7bb23c12f2534","first_seen":"2026-09-19T08:58:10.044219Z","last_seen":"2026-09-19T08:58:10.044219Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:58:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"voters-moonshot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"voters-moonshot.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"voters-moonshot.fun","ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-18","domain_rank":0,"first_seen":"2026-09-19T07:04:37.500893Z","last_seen":"2026-09-19T07:04:37.500893Z","alert_count":8,"request_count":4,"received_data":2738919,"sent_data":2065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8761ae8bd0292ef055fe7afaeac9139b","sha1":"0099e4855673095cd8c4fe826227756a76bdff12","sha256":"ab871beed4f634ab8b29f96937c84ae1430face711fc29c980bb5164718d334b","sha512":"c1971e69491dd3c744bda14bfe27f1f49f9651d499aeeba01ec88b9261eccbbbc814fbd57cfda1cc302e1370054054dcfe23b426ce656a5aef923162ed45c554","ssdeep":"","tlshash":"64c0805485748d71090816f7917563853150757c0146d1d5d2fec95b548dfc1078c85b","size":180,"data":"","first_seen":"2026-09-17T08:25:35.282265Z","last_seen":"2026-09-19T08:58:10.052216Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35de11bcf1c6325a26d781be3192e9c4","sha1":"dd42a4e2d74e70b29726da1784c533688d726c44","sha256":"c10d26ba5e2117c916a383a4d0b9cf0ecaa5a3fa8c5b2c33b9138a0869297b19","sha512":"9e15dd6cb5939e36b894427d66877c08a26f544fb8f6b3eb6ae0575003d1812e85dd8ab76a502255917ed194487f4138326a42bdcc2901eda09e29ab9887d4a7","ssdeep":"","tlshash":"9d115927222233707cd9d5dca9b6d98e39bb500ae40a0090b08e944c1e34bc944f7bdc","size":863,"data":"","first_seen":"2026-06-11T09:50:31.530872Z","last_seen":"2026-09-19T08:58:10.053203Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47cad7de3bee5fc6a872e42716bc93d1","sha1":"ca57078dbe628143a81169cf7c06a3e91263b106","sha256":"1220c75c8cecc68ae32af485330bab13db4aa0324980078cf2455e096ace17e0","sha512":"427a7eac64642d8e21fd5fa92174e704a650993f5dd36dbf774697aeed969a07ef9319f1d55a1c63b0916fb621d05be54717dfa5713ccdb6de177210122607eb","ssdeep":"96:5VUdu944SLruJRlWwLwr8nx/XL6CqO60EitvbZ3Rr9I:5aY44SLLwLwr8nx/XL6CqO60nVI","tlshash":"1081796ffbbb0534daab753a5befa384777180072409e1013e6c45526fe6f9014abac1","size":4097,"data":"","first_seen":"2026-09-19T07:04:42.486744Z","last_seen":"2026-09-19T08:58:10.053848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fc35c02e601f1302ec0b24f725bab87","sha1":"635d31bd961b81da93e3b296c6df25fed6a389bc","sha256":"e80a3cdbd64e383478afacd8d640edbec02795ad94d2631a2514cb14cf5e51b6","sha512":"0a4ab7b8cfe24830da1a971c1ba8125a6c97a5eab57a87e6dbd822b81fb73b21cd7f775e1bb24a498712717e2e95ab470deb3b3840a0483a1f1a1091c42a2ddc","ssdeep":"192:JH45oLP/OQNjTTns5vm5JW249rXpyPf1pfurMrEWvhBA2g25XTigH4:JLZVjW9OpfXR5uW4","tlshash":"f402711a7ae30875ace7213babefa29879b484434849d4103d4cd4554fe0f616abfbe4","size":8319,"data":"","first_seen":"2026-09-19T07:04:42.499844Z","last_seen":"2026-09-19T08:58:10.054711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/secureproxy?s=%2Fipfs%2FjXACKOgE4u2vNElZtkQv3A65da8c14f3bc0a2204f2411ea15af0e1%3Ft%3D1789808245121","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35bc7baa21603137b405aa96b84f097b","sha1":"8e3f77a61c2c7dd01b9e4e3a841c0269423bab0f","sha256":"67e0ddc8796b1ab77f570ef8a3f75a3494987c9978c4a120c9846078b3be1776","sha512":"b753d9c42c9501354ce9434b0b0295cfc79bb5ee49278fdb667de11e14f5ccf4d0e4973cdffcf9740098bbdcef50bf1a2bb0ca79422a5c3fd26e439a32a75c6f","ssdeep":"6144:ch5gDnrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csrq9NWCEiox3Ti/ESVPHSyyA","tlshash":"add4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791d89bc","size":645583,"data":"","first_seen":"2026-09-19T08:58:10.047659Z","last_seen":"2026-09-19T08:58:10.047659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:57:24.712Z","timestamp":1789808244712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-moonshot.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:38:57 GMT","end":"Thu, 17 Dec 2026 10:38:56 GMT"},"fingerprint":{"sha1":"93:C9:B0:35:D6:E7:FE:4B:E0:9F:CA:37:F5:15:CE:B2:A8:63:7F:2A","sha256":"E9:1D:89:EB:B5:A2:CA:E7:53:28:9C:0E:39:81:0C:ED:2B:EF:5F:DB:51:E9:59:F0:69:8E:6E:29:8C:C2:AC:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voters-moonshot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:57:24 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 05 Sep 2026 06:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmrwZW39UJzn4lwaEtRy6fPysYhSgR2z1f5%2FcKkws7URcCujR3vn4zzLgf3rAWMcMaDDbsD6vKZDSeyRHr55B%2BvYA5qCq0VwYPxtoZv3XErX58Oj8XsRiUjZs2IscsAuIic2NaHn\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d761f9bd4623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2056301,"size_decoded":1386158,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (59369)","md5":"fc01dcef5b529e5aa1f74a1ba9065c73","sha1":"f8dda7e954f0bcb5bf7c230d935849947332efe8","sha256":"ba2cb39185cbec3b9a237caba562f582f9c3a39ea3b3f92e596af7a6b6e4091f","sha512":"642063da798c02e3a816a5a5b763cecef8b720fba8d05a9833601ddd3c4c42b4f2c409fd3a98d7567dc3bc0864589d1e56e81edbde61fef81829dba7734be039","ssdeep":"12288:zME+RW+hBMX2MVVSfIcWL0bBGhEP8R6GWPDsdYENYuNlbUfxr8Z2Tm:K82CVdUCEdGms7GxQZ2i","tlshash":"032501717029e83f7e37e8b962acb45c5c05b083de1853d8fa4962259bc7bf14ab7508","first_seen":"2026-09-19T07:04:42.480591Z","last_seen":"2026-09-19T08:58:10.04617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":25,"connect":15,"send":0,"wait":206,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"voters-moonshot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"voters-moonshot.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/secureproxy?s=%2Fipfs%2FjXACKOgE4u2vNElZtkQv3A65da8c14f3bc0a2204f2411ea15af0e1%3Ft%3D1789808245121","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://voters-moonshot.fun/","date":"2026-09-19T08:57:25.130Z","timestamp":1789808245130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-moonshot.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:38:57 GMT","end":"Thu, 17 Dec 2026 10:38:56 GMT"},"fingerprint":{"sha1":"93:C9:B0:35:D6:E7:FE:4B:E0:9F:CA:37:F5:15:CE:B2:A8:63:7F:2A","sha256":"E9:1D:89:EB:B5:A2:CA:E7:53:28:9C:0E:39:81:0C:ED:2B:EF:5F:DB:51:E9:59:F0:69:8E:6E:29:8C:C2:AC:00"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FjXACKOgE4u2vNElZtkQv3A65da8c14f3bc0a2204f2411ea15af0e1%3Ft%3D1789808245121 HTTP/1.1\r\nHost: voters-moonshot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-moonshot.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:57:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9d9cf-jj93phwsfdAbnk46hBwCaUI7qw8\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=bPY58svgsraObNioeCTXAw.js\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/19/2026 08:57:25\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 39dd68a420ab0d6d667a8c8c68a233e3\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdyEQ5vz%2BrRCClOknZGZav46UdBL6uUh2CS5KS2ebqtpJRPuqGsr29XwPD%2BBDldh8wD5%2BInGp1UrBQK11A1NT%2BDSNNRESQVT5hTU%2BsmC1QPt%2FUbjs6etFK5zuvAlLVXnP0NYS4nT\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d761fc1dbd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645583,"size_decoded":142082,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"35bc7baa21603137b405aa96b84f097b","sha1":"8e3f77a61c2c7dd01b9e4e3a841c0269423bab0f","sha256":"67e0ddc8796b1ab77f570ef8a3f75a3494987c9978c4a120c9846078b3be1776","sha512":"b753d9c42c9501354ce9434b0b0295cfc79bb5ee49278fdb667de11e14f5ccf4d0e4973cdffcf9740098bbdcef50bf1a2bb0ca79422a5c3fd26e439a32a75c6f","ssdeep":"6144:ch5gDnrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csrq9NWCEiox3Ti/ESVPHSyyA","tlshash":"add4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791d89bc","first_seen":"2026-09-19T08:58:10.047659Z","last_seen":"2026-09-19T08:58:10.047659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"voters-moonshot.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"voters-moonshot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voters-moonshot.fun/","date":"2026-09-19T08:57:25.135Z","timestamp":1789808245135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-moonshot.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:38:57 GMT","end":"Thu, 17 Dec 2026 10:38:56 GMT"},"fingerprint":{"sha1":"93:C9:B0:35:D6:E7:FE:4B:E0:9F:CA:37:F5:15:CE:B2:A8:63:7F:2A","sha256":"E9:1D:89:EB:B5:A2:CA:E7:53:28:9C:0E:39:81:0C:ED:2B:EF:5F:DB:51:E9:59:F0:69:8E:6E:29:8C:C2:AC:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voters-moonshot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voters-moonshot.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:57:25 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 05 Sep 2026 06:12:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GFuuhc4QqyTTQsHssA4u%2FSADSD%2BGc67l%2FnUoAp4RCklp3zNLaLb%2Fn9lhxv8W9at2ImzQaTBWy5EvpgSALefc8EGaK5dy3japV4LVmn8oriecv9%2BivEGOUxoET7w%2BxybnE4Kx0x0\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d761fc1dc023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32320,"size_decoded":11491,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (26153)","md5":"97c7f68e072a2ba83ec022b67e5a45e3","sha1":"a09acb1acf8048ffb92d1613e7f43e23181b9712","sha256":"094b6b343a66dd748c6151004e101001f0f6fc47c6ac06d67b68e3baee50b62f","sha512":"100ca3409f5d2e5364c5dfe51d06a6c4353ff541574b034be4c352fb03e60470912f48c4c0612f97974c2fc1b6bf1ead3d72ae6dbb830ccc0dd63ebd1b29c080","ssdeep":"768:8qVI9/J6g+hZvQhrW0amtXilnTsKbhEmVe:8qV8b+h9ZBEmVe","tlshash":"ede2d7b5a235d83eed33957aa39cec8c2504a6428e6616dcf6023526c6cbbf31d71319","first_seen":"2026-09-19T08:58:10.049348Z","last_seen":"2026-09-19T08:58:10.049348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"voters-moonshot.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"voters-moonshot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voters-moonshot.fun/secureproxy?s=%2Fjmpd%2F","fqdn":"voters-moonshot.fun","domain":"voters-moonshot.fun","tld":"fun"},"ip":{"addr":"104.21.27.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://voters-moonshot.fun/","date":"2026-09-19T08:57:26.226Z","timestamp":1789808246226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voters-moonshot.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:38:57 GMT","end":"Thu, 17 Dec 2026 10:38:56 GMT"},"fingerprint":{"sha1":"93:C9:B0:35:D6:E7:FE:4B:E0:9F:CA:37:F5:15:CE:B2:A8:63:7F:2A","sha256":"E9:1D:89:EB:B5:A2:CA:E7:53:28:9C:0E:39:81:0C:ED:2B:EF:5F:DB:51:E9:59:F0:69:8E:6E:29:8C:C2:AC:00"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: voters-moonshot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://voters-moonshot.fun/\r\ncontent-type: application/json\r\nContent-Length: 1290\r\nOrigin: https://voters-moonshot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1290,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB1gIhAyIADQAuAw0DFQDrAhUAAgEAQwMAAO8nhn2XtsKCATqVtJyal-HPPI25IY0CAAA-AVJTBWeF39l9AMVvplIYiEtMc-clWofF4xjJTtYSKq_LJnGKLel3HOEnuucRNnIf-dgqt7SHFWSzo0xqet0wPnne_MkF-97nPn28hKT5tFYfWjtKEiJhPZDg-PJOwkQ5DQewqElRselXcdZ-cECPzxo9sNhGfKVy14fyoP7iJ2a5rxXq9mdexfxsB7Te4el_y-pJ3X-y5wCEHFM-rQ74c5SuGgtu2HrPtsVhlOrlgNXNlPcoArXkno9xwpViZLI_7IJR5V7QGYLqmFcVcdd7fj2MmatanoHW4gwzXRszR5oP97O_fke48yjyjNB1tMNpkf4uVHepR5D898i-66hT64eDP4uOzUDJj08Iw_V_I4_P64WdsZ5h2nIVRLJRD7uBlf__vWz4VY9RL9etzbrfpbaOFu_CxuL5c4JA_2WfNCnb_o7ggn3q0YfDXQcJZt0Ao5hmVI-9HxhMUeNOa7vyIAnC53x4MBWP93t-pSwN9aupllaQUBxcuL27PynPrfh6Lut4CwWYQVtCHMFepC9u9IZKYeDDh8uMWUvxgRlyjtTGCKBW5dkcZfbWpNUhLWMIa2wBB9R3BVeOW0GtLPZ61r3WhfzkgtbYy4DN3ReujnxMzzD4QDHEhAtm_Omr9MPM_NTBy14KY_6Rkbz5Zq7lu4s6gEbmnZ-_Y8QzQiMblAg1ItCvCpXG5DCzo_n2URhdst4cnLceZWeAd0AGbEFq5qzGI4SEBTHqMTpCTl0nVyn4BKPgOPJ5VwTGFShxbm2OUnYmlPBMDLgjV5HD0m3DUZbLVyj99OHyR9MmhI_My4cVnOUbWJ8Jn4MsAsleR5mY5qB4zHB34YkMa3SDy2iGa2gd4Q3DLRUO1OKDuhVZ8N1u4S3Odzl4WL0lTzEevsYCbi9IiDgC0LBI_7DImC3bsLjkHJRWAqGdUYajq0esd3SAkr5x3CdfwRmYtXlKVM-8_I1VfA9KrGXJQHRK2PTvvUL_d7deQclZ6GXzyxjB_kyKexoKwDIEHQw07tpLzepjc_HiSIz44Fi_5V27zeEZcnJcrNN3ZRWg8OGiNDO1ArbhePGGZq-kaPoF4UeevGIMoo9kELNTBsCa_ZWOAFOAkAFtK7pmI1xRSy8TCieRSKozR0EoF_Qc7U0Q\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:57:27 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1789808306331\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 09/19/2026 08:57:26\r\ncdn-edgestorageid: 1445\r\ncdn-requestid: 77cc9daee3765f9bfd6227c5391c5446\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYoweZt2bFo2HhVfQ3ISrjW74d90unKz%2FI8r9n56gOFcPs0MGwEl3s7Jgxh7xjmlvr4cwaxB2MCG6k%2Fx25qCk94b9DXm6hq3ljQnFkEC32xMXblHOpCNogicEO5BuOjBPB79eeGN\"}]}\r\ncf-ray: a3d76202ef4723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3262,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T13:41:56.030351Z","times_seen":18549281,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"voters-moonshot.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"voters-moonshot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}