{"report_id":"20471ec1-9642-4e5c-9b54-d9f77b68a9ab","version":6,"status":"done","tags":[],"date":"2025-08-17T01:51:58Z","url":{"schema":"http","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"title":"Rewards Vote | Sonic Labs"},"submit":{"url":{"schema":"http","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T01:51:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"proposals-s.network","ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-17T01:52:00.404081Z","last_seen":"2025-08-17T01:52:00.404081Z","alert_count":12,"request_count":12,"received_data":3016111,"sent_data":5355,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.ipwho.org","ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-07-11T11:18:46.569057Z","last_seen":"2025-08-13T13:06:08.210473Z","alert_count":0,"request_count":1,"received_data":405,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-13T15:26:13.000794Z","alert_count":0,"request_count":1,"received_data":761321,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.sanity.io","ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2015-01-07","domain_rank":67597,"first_seen":"2017-03-16T07:21:36Z","last_seen":"2025-08-10T07:58:07.864802Z","alert_count":0,"request_count":1,"received_data":10310,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"Function","is_inline":false,"md5":"2f0b46fb3332a45cc5b68b9cf7ae4edf","sha1":"704ecab7383b4444d0aef7ce83489be8ad84e20f","sha256":"79d0dcd00e4c0e1305428a9497d3a5664f64d566dfe761293e985d6e7e39f2ba","sha512":"466d1629b592058e0b4c3e5407f1ff54584a6a2392fbbcdc0d22c0c7c91d5ceb13ec12a9fd19533b2b29bec17a918fc9de9d6f2b36bd4019a9b50a839797a5a3","ssdeep":"1536:Xbfeq97Q9FlDZY81iwKnJz7uv6CZn/QZ0vntebLvLaCHm:Xbfeq7+PmBwggbZn/BILaV","tlshash":"b434404848856a7dcb7bf38d97e37132dbc10ceacb5464149497e2c7e0aa3d1a2f194b","size":233580,"data":"","first_seen":"2025-08-13T13:06:13.239012Z","last_seen":"2025-08-17T10:59:39.237436Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/modals.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/fpbundle.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-21T06:56:43.25011Z","times_seen":3700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/bundle.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3381c635456526dd037705a6f0b11a00","sha1":"785c492b1920cc28d0e741e7544a13e9d2238671","sha256":"df6446c5d771ab5f7da4f7a8b3087d28cba5074f38ceb110bd76490eb69135f9","sha512":"4b8e4efddc7788213e2926e840df7fc7798d472fddeeff4b9085ec0248536383d8959d7e61052bb7043f7b7895c2b036e3c7cd2be4c44e46c5078a520f8dceb2","ssdeep":"","tlshash":"25012e28b5e45abb0bb32225c60b6280ba52004bc00be901399ec5c70fdd6451c39fcb","size":659,"data":"","first_seen":"2025-08-17T01:52:04.353009Z","last_seen":"2025-08-17T01:52:04.353009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/main.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"564d50449935715c86e596bec03a0004","sha1":"03614098abf8d4abaf8af253e5a7577f8389877e","sha256":"e0f5b2aed8ada8ebc431a4e42a6e1452dc334428cedc13c1bebc88e2a2cfe9ce","sha512":"1acb2cf7e916fd6b80c15d78679b4d56ebf480fe8136b18bdd2e539fc75f737e1a84b15a7a80ff6158862004dc9887ce4c898bd1645a304a6add343481c37854","ssdeep":"1536:+RVeDRCLOqwpo8ZWag9hdlxS5eMrl/Qf+9FN0XL9P9KAHH:+RVeDON5aod2trl/JeXKi","tlshash":"103451484885aa7ccb3af74d97f37936dbc10ce9cb5460149497e1c7e0aa3e1a2f194b","size":237255,"data":"","first_seen":"2025-08-13T13:06:13.215043Z","last_seen":"2025-08-17T10:59:39.229106Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"proposals-s.network/_next/static/css/689141951f1fa70c.css","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /_next/static/css/689141951f1fa70c.css HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 49172\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49172,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48134)","md5":"99317d4cc2bf651230f2b12f18d50b16","sha1":"f10d9ab231a7d1eb04ead50e552342e155c20156","sha256":"166586103de48b20276940e850e4894a47be4016010d6561c8b765e93948b691","sha512":"b0229a99b7a1b72388d897363a8d2ea45efcba0c57370835035efe9978875522a4ced7aff7b26c94468dadbacf7f8008655f77ca3f116c7e8946aaf903613cfb","ssdeep":"768:tCoLH2q2lNo4ZFHmBOUmBxrwUs65x8p1IqXOWhTbY:VH2q2MmSqy65x8p1Io7Y","tlshash":"a823c66faa15503ebc3350f6c2d87adcb115f081de2a12fabe835111aec77f21967614","first_seen":"2025-08-17T01:52:04.331044Z","last_seen":"2025-10-20T13:29:31.409283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/modals.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 52833\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipwho.org/me","fqdn":"api.ipwho.org","domain":"ipwho.org","tld":"org"},"ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:37.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 16:08:31 GMT","end":"Tue, 14 Oct 2025 16:08:30 GMT"},"fingerprint":{"sha1":"87:88:D2:F8:B6:23:06:38:98:C4:B0:E2:06:68:C4:E3:63:EA:AB:2B","sha256":"21:76:B6:9A:29:3A:7D:88:85:23:77:5F:33:A5:A8:D9:7F:63:79:69:AD:62:6A:CC:8F:63:72:1D:81:74:45:82"}}},"request":{"raw":"GET /me HTTP/1.1\r\nHost: api.ipwho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proposals-s.network/\r\nOrigin: https://proposals-s.network\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 17 Aug 2025 01:51:38 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-22T01:23:41.676941Z","times_seen":542643,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":284,"dns":1,"connect":135,"send":0,"wait":137,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:37.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proposals-s.network/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 17786\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T01:24:25.529128Z","times_seen":17436789,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/sonic-logo.svg","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /sonic-logo.svg HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9361\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"454e3263ba811dc1d0801727d778bfeb","sha1":"61159bbe4fdc6d2f07dd9265e8db47ec879e00f0","sha256":"880597a41037539c1183a57e4a8edafcc8ae1417437dd84ebd09dc6f04b624f9","sha512":"21158d405ff54a8d71fae39b7c66d3599c8d4dcd90d28c647bf7e89e8d8eacf1e93937384cea8f6c9926276fedfebab0ac04189e2af58a4669abb34b3df1c155","ssdeep":"192:f3NW/OQC+VBia2EY5jMit8W0oh2hj87BQ87BLlM:vNDZ+VmEyjPop8dQ8de","tlshash":"b412a6ca93b892f9f409c3fcc28704b8721ad4eb6591c655d2e4ee2e5a9141d2c98fd3","first_seen":"2025-07-13T03:56:16.991178Z","last_seen":"2025-10-20T13:29:31.384593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/_next/static/media/01af0fc7b4278e65-s.p.woff2","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /_next/static/media/01af0fc7b4278e65-s.p.woff2 HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proposals-s.network/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 27760\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27760, version 1.0","md5":"6fa778aa9ee280df9ff563f3a08b0350","sha1":"0527ca2066f912417dfca442bee798307e7b0d74","sha256":"17849766764f956cf2982ec737a199d14ae441847d4ac8f9b2602118e3f64ede","sha512":"dccab993d6a8fafa096896c74165168d8dcf4fa632744b2dfeabc5d0f15d78696f1399ac6116664acc2e2fd2ca7e4a6673e9349b7c32053f47392d39b8c37664","ssdeep":"768:ncevRb3kO8mip7zfTt+wQHYufLa6KiNhw5e:blUO8mi7LTt+vH1fL9KiNhx","tlshash":"8cc2e03242f4e44ac98928f8e321962cf9d775fc6e655d0fa5344806fee2990942be4d","first_seen":"2023-10-05T08:35:44Z","last_seen":"2026-06-28T04:03:56.687026Z","times_seen":128,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/sonic-airdrop.svg","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /sonic-airdrop.svg HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 33325\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33325,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd905eca99d058e8c07244057f96dd8a","sha1":"b375b82e94c3fa622bba7207c788869e48129a2d","sha256":"37e0e92618509185fbbcbce272a7d3daf2a8336c20bc16c117fb518713ec7926","sha512":"07e9d4d907fb94b25ee905acb2ef975561af6b29b0eb0e48340ae5a871cdf95a7705c39679448fb858dcd3ffd79068667911a95fc6f972b625c8cf7b1f22e703","ssdeep":"384:wOJpX5FDBtIhs4T/gH5qsqr+KPzRdPQI6SH6S36IL18AEXko6omyVyipm5z2porg:wOJV1uhsI/ECRd5693r9ZgMO6gIufo","tlshash":"b9e2b5ec7b7556e5d886c3d6de1640bd381a80fa58c18b64c229af0e38468dddc6dfc2","first_seen":"2025-07-13T03:56:16.985645Z","last_seen":"2025-10-20T13:29:31.400692Z","times_seen":5,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":117,"dns":0,"connect":16,"send":0,"wait":34,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/favicon.ico","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ae94872934a79672d1b038b38a593fe2","sha1":"7f9a27cea47140f41b0f1214a157c3e307a4aa4c","sha256":"4ef82ab44e86e38551c47f02dfd6fa3d6089203c362de36e8313eedbc5dfdc95","sha512":"b6a3d697eb63795c5fdf36f4ccd91bdb4994f729b76f19a5e0d1b43bb90ccacde5bb46792266c2bf82899079ab4fd221dd5aeb0ce8652b35a2350fb1f131f949","ssdeep":"192:jxwSA1DV0XuokmY6GZZhdCdLx0HY0lwQLL5/PTPZfdkZvmIVtIShBtvgzjrljT:jx4V0XuCWB0Xylt99fypsSn12rBT","tlshash":"396273d6d9e3acc8f3c7c77a81e5e9a9505641f06c3b5703aa01b49147732de6e809a3","first_seen":"2024-12-01T17:53:51.529914Z","last_seen":"2026-06-18T21:19:17.857801Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/favicon.ico","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ae94872934a79672d1b038b38a593fe2","sha1":"7f9a27cea47140f41b0f1214a157c3e307a4aa4c","sha256":"4ef82ab44e86e38551c47f02dfd6fa3d6089203c362de36e8313eedbc5dfdc95","sha512":"b6a3d697eb63795c5fdf36f4ccd91bdb4994f729b76f19a5e0d1b43bb90ccacde5bb46792266c2bf82899079ab4fd221dd5aeb0ce8652b35a2350fb1f131f949","ssdeep":"192:jxwSA1DV0XuokmY6GZZhdCdLx0HY0lwQLL5/PTPZfdkZvmIVtIShBtvgzjrljT:jx4V0XuCWB0Xylt99fypsSn12rBT","tlshash":"396273d6d9e3acc8f3c7c77a81e5e9a9505641f06c3b5703aa01b49147732de6e809a3","first_seen":"2024-12-01T17:53:51.529914Z","last_seen":"2026-06-18T21:19:17.857801Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T01:51:36.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 17786\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17786,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1237)","md5":"083825ffe8ee18ef13e5b7518e23e024","sha1":"cc084cf179cd3a1a3098d957fc85ee25c2573a92","sha256":"1494e766c3dde86053b81117ea453940a192e46c39abfa749fbbc32ed4fc6750","sha512":"5ad4de533144932554a541faf1a9abbd9e2900433d0f2fe6e912efcee50a8ded08e732535147dd25d8d1aa88ea25c63f4ee4bb72e8f54fd312b1d9d506122834","ssdeep":"384:/bkhfFs0LzqK7piicds0R9KiNdYRIKFdzMLbv:/4ha0LzjwKiNd0IKFdYLT","tlshash":"298239b52295053fa08383e8f331f729f08695a6da879049f3fd67572ba9cc64c122cd","first_seen":"2025-08-17T01:52:04.345402Z","last_seen":"2025-08-17T01:52:04.345402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":65,"dns":21,"connect":18,"send":0,"wait":35,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/main.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 237255\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237255,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"564d50449935715c86e596bec03a0004","sha1":"03614098abf8d4abaf8af253e5a7577f8389877e","sha256":"e0f5b2aed8ada8ebc431a4e42a6e1452dc334428cedc13c1bebc88e2a2cfe9ce","sha512":"1acb2cf7e916fd6b80c15d78679b4d56ebf480fe8136b18bdd2e539fc75f737e1a84b15a7a80ff6158862004dc9887ce4c898bd1645a304a6add343481c37854","ssdeep":"1536:+RVeDRCLOqwpo8ZWag9hdlxS5eMrl/Qf+9FN0XL9P9KAHH:+RVeDON5aod2trl/JeXKi","tlshash":"103451484885aa7ccb3af74d97f37936dbc10ce9cb5460149497e1c7e0aa3e1a2f194b","first_seen":"2025-08-13T13:06:13.215043Z","last_seen":"2025-08-17T10:59:39.229106Z","times_seen":10,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":25,"dns":1,"connect":17,"send":0,"wait":33,"receive":54,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 01:51:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 155070\r\ncf-ray: 970586ff8ee9569b-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-lga21927-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3690879\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GQw8jR9eHoNqbOBolHHV1G09D%2BiWDJRDdvcfCWBiW0%2Bjaddc0M7Ilf8%2Bcwmh2aPeXHDn4G5%2FMiyKNfGvLSCvXgDYUuEaNfjHKU2wBY3bfESC8T7mM2ZAXgYW1jLdbBAQV2g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-21T06:56:43.25011Z","times_seen":3700,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":7,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/bundle.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2510372\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-10T23:25:47.366161Z","times_seen":671,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-s.network/fpbundle.js","fqdn":"proposals-s.network","domain":"proposals-s.network","tld":"network"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.proposals-s.network","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 13:33:22 GMT","end":"Thu, 13 Nov 2025 13:33:21 GMT"},"fingerprint":{"sha1":"4E:1F:22:B4:E0:E6:89:6E:CA:6D:71:42:20:4B:27:95:14:CD:25:42","sha256":"61:AF:D5:84:CB:6A:41:D3:69:FB:D8:D9:33:05:53:4D:E3:1F:72:8E:1A:53:E1:AB:9D:2A:5F:97:95:12:78:19"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: proposals-s.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:51:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 45503\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 12:18:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-s.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sanity.io/images/3tj5s547/production/61159bbe4fdc6d2f07dd9265e8db47ec879e00f0-179x57.svg","fqdn":"cdn.sanity.io","domain":"sanity.io","tld":"io"},"ip":{"addr":"34.149.250.58","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-s.network/","date":"2025-08-17T01:51:36.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanity.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 18 Sep 2024 00:00:00 GMT","end":"Thu, 18 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D6:34:6F:95:B2:ED:DA:03:45:6E:5F:37:98:76:86:99:C0:C2:8B:B5","sha256":"79:0B:1C:CB:3E:26:4F:63:08:1B:33:3C:A5:D1:5D:10:D8:26:7A:76:CF:58:64:14:34:09:35:FE:51:32:65:CC"}}},"request":{"raw":"GET /images/3tj5s547/production/61159bbe4fdc6d2f07dd9265e8db47ec879e00f0-179x57.svg HTTP/1.1\r\nHost: cdn.sanity.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-s.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nsanity-inflight-current: 0\r\nsanity-inflight-limit: 200\r\ndate: Sun, 17 Aug 2025 01:51:36 GMT\r\nx-b3-traceid: 833e25f72f72b90d\r\nx-b3-spanid: 833e25f72f72b90d\r\nx-b3-sampled: 0\r\nvary: origin, accept-encoding\r\nx-sanity-asset-storage: gcs-default\r\ncontent-security-policy: script-src 'none'\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 20 Aug 2024 11:35:13 GMT\r\ncache-control: public, max-age=31536000, s-maxage=2592000\r\nsanity-gateway: k8s-gcp-eu-w1-prod-ing-01\r\nxkey: project-3tj5s547-production\r\ncontent-encoding: br\r\nx-varnish-age: 0\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]}],"data":{"size":9607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"967e746e2b45ec02c232946aea3e7ab3","sha1":"fdc835b01d61af63f2ae373fa54313cdb718aa17","sha256":"9e16db7cf341d175e659ace7db918b8957a0c8a95c553fc00652284b77a12dfa","sha512":"c659cbd7083c8b8f5ee8d5a4902b418844218f6ad18dc1ecee76fa34e35d69b7299e1e61a9edc9763a3bee666e45590f2152f25d3d2c9066dee4089b406b1628","ssdeep":"192:o3Ne/OQC+VBia2cY5HQit8W05hchi87BZ87BbFQeNAZSzEo:6N7Z+VmcyHqe48dZ8dyex","tlshash":"451296ca83b8a2fdf408c3fcd28344a8716794ef6592c665e295df2e996114c1dc4ed3","first_seen":"2025-08-17T01:52:04.35032Z","last_seen":"2025-10-20T13:29:31.388654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":110,"dns":27,"connect":26,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}