Apparently all that data is included in the ActivityPub protocol. On Kbin, every post has an Activity button that shows every user (even those on other instances) that upvoted/downvoted/saved that post. So if a Lemmy post happens to federate to Kbin, all that info can be seen publicly by anyone.

Yea I’ve got both .zip and .mov blocked on my pihole

The encoded string contains the URL zelensky dot zip. Zip is one of the newer top-level domains. It itself is not a zip file, but I am not going to visit that site to find out whatever treasures it has to offer…

For a second, I seriously thought the fediverse logo next your username was an award 😂