{"report_id":"36edbc9d-39bb-4359-80a5-112a0e9e2562","version":0,"status":"done","tags":[],"date":"2026-07-12T20:52:55Z","url":{"schema":"http","addr":"proposal-ai.online","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"title":"Почти готово! Домен успешно привязан к хостингу","dom":{"size":768348,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"5aaf7398432b24c1b0fb6cc1641c49e0","sha1":"77f427b48f32b60776b2ec354de93dfe209c6861","sha256":"d30709fcf413bb691552c4c670db5057794f12f42fabe433e4ab381bfe9283dc","sha512":"e6b5b6708b9e21d76ffedeeb3bcd05d009de3d9dba3d8b147232c38647ece3a07876d323b0f3ff95a0e12111d0907ed7a0a107942b6de0939db953760882e049","ssdeep":"6144:h0T9gq5TgX8gscru33oyBsQ70t6o1ysGYfwRXQebnLCNwPdvgH:w3oyBsQ70t6o1yOfwp1n2H","tlshash":"94f419c8abb02c5ed21b8631ac3f89c6f30a75d4b6fc4407694df791e25e116f226678","dom_hash":"domhashcf5334f2d974ddbaf245a75d8719e9aa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"proposal-ai.online","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:52:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"proposal-ai.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"files.reg.ru","ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":5588631,"first_seen":"2022-11-17T08:46:40Z","last_seen":"2026-07-11T01:06:51.305519Z","alert_count":0,"request_count":3,"received_data":262821,"sent_data":1572,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"proposal-ai.online","ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-12T20:52:57.258429Z","last_seen":"2026-07-12T20:52:57.25843Z","alert_count":4,"request_count":4,"received_data":2306806,"sent_data":1661,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"01f8da1f6f1551b84202ad0aad70efd2","sha1":"f7410e44750232e13085e0a3ba649d93239c3efe","sha256":"09a1c3a0db7beafab34929ff0070589812f724b67621a79e2374047e302bbed9","sha512":"006e7bc128add405b845275ebfc8239a260b191873ce85b468bbe7dca5f102371e3e3ac4c6cdaccb07683e790751b6762874da6f30f2a0f2075f83c9dd43ccc4","ssdeep":"","tlshash":"0ea02208a000220888203022c2b3f0080aa3000c8e08c80202020008002000b88888bc","size":59,"data":"","first_seen":"2025-02-02T04:11:25.38907Z","last_seen":"2026-07-13T08:07:14.87997Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","size":4278,"data":"","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-07-13T08:07:14.882308Z","times_seen":2672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","size":85185,"data":"","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-07-13T08:07:14.883217Z","times_seen":2661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f6e4df2bd02450c99bbe730eb7f52e8","sha1":"44a96a1c9d4f0f3bf9baa20328daf3f913958fb6","sha256":"0501ce77df502667c3729876d8e40ef70d672dcca30fd4990951e46db24287c5","sha512":"0c05c193eb837eeb715540aa565ebcd4315416a5d0a9023c45ee7c45c6ff8f6816b7a8d42c2039828616eafd772a88564d18e76774c6bc6a16a384316b14502f","ssdeep":"1536:ewCNwl2fuPGzycYsClVsLuqf6BlVoFSdexsJPF/2Xuzt:HCN5vYsCPskDzeW5F/2X+","tlshash":"51d31789bad1bd6113ba11a1686f88c7f63a5944584f8818f24ef4e5bc3d83e5137b3c","size":130960,"data":"","first_seen":"2026-05-25T23:45:07.194229Z","last_seen":"2026-07-13T08:07:14.884055Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Regular.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://proposal-ai.online/","date":"2026-07-12T20:52:25.100Z","timestamp":1783889545100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://proposal-ai.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://proposal-ai.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:52:25 GMT\r\ncontent-length: 98868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://proposal-ai.online\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"dc131113894217b5031000575d9de002\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: ba8a1ae8b3cc6f04870ec41cb5df10e1\r\nexpires: Sat, 03 Jul 2027 20:52:25 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98868,"size_decoded":99758,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-07-13T08:07:14.872944Z","times_seen":26870,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":3,"connect":43,"send":0,"wait":213,"receive":1,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Medium.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://proposal-ai.online/","date":"2026-07-12T20:52:25.104Z","timestamp":1783889545104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://proposal-ai.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://proposal-ai.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:52:25 GMT\r\ncontent-length: 105924\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://proposal-ai.online\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"75db5319e7e87c587019a5df08d7272c\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084004\r\nx-request-id: 4b7e9c6feb0325128cf9940912db7e22\r\nexpires: Sat, 03 Jul 2027 20:52:25 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105924,"size_decoded":106815,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105924, version 1.0","md5":"75db5319e7e87c587019a5df08d7272c","sha1":"92b30527304b5dc80f45e997e0b1ac4c70110a18","sha256":"1b498b959e5b7decbf9185803591d25bc1fbf83e798372ed30d32d5c79d82ff6","sha512":"4e556d80b52ddbadddf9287f6cdaef0d12113d0fa4a07728fd67767b97806eba5fa0f82711f71e76ee2875192d7618a9b6c277ceb6d69a30f76ca8e3ebb74aa1","ssdeep":"3072:7Jk35GDAni+UzuVEjLH8MSP02J5E4ZjJffp:7ys0iIEjz8MNGRfp","tlshash":"3ca312f46132150feebafcb00b9354415488ea21d39746ebeb74a5a3644dcdb8ea06c3","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-13T08:07:14.868744Z","times_seen":10651,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":45,"send":0,"wait":47,"receive":130,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://proposal-ai.online/","date":"2026-07-12T20:52:25.110Z","timestamp":1783889545110,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: proposal-ai.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://proposal-ai.online/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:52:25 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 10 Jul 2026 15:15:52 GMT\r\nETag: W/\"bb91b-656433769ce32\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":768283,"size_decoded":131725,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"259eeef474978680abcb84b2974a00da","sha1":"f928a6a6ec60fc2ede200ec1588f1e5ad9a19efb","sha256":"8bde86ecfd6d79fa57cf61ee13a947ce0148abc56a7cea07513cf3c4686461b2","sha512":"20d521f9b887e453d44e819a63504cd793a0f8611866d63373cca47e985ba5c5ec4701dfc6cef475bb877954258bf58fa686d25f3b09c2eb8e2152a741f7aaf7","ssdeep":"6144:80T9gq5TgX8gscru33oyBsQ70t6o1ysnYfwRXQebnLCNwPdvgJ:x3oyBsQ70t6o1yjfwp1n2J","tlshash":"4df419c8abb02c5ed21b8631ac3f89c6f30a75d4b6fc4407694df791e25e116f226678","first_seen":"2025-10-31T16:22:24.717131Z","last_seen":"2026-07-12T20:53:01.347882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"proposal-ai.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:52:24.440Z","timestamp":1783889544440,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: proposal-ai.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T08:17:52.207669Z","times_seen":17208424,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"proposal-ai.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:52:24.640Z","timestamp":1783889544640,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: proposal-ai.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:52:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 10 Jul 2026 15:15:52 GMT\r\nETag: W/\"bb91b-656433769ce32\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":768283,"size_decoded":131725,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"259eeef474978680abcb84b2974a00da","sha1":"f928a6a6ec60fc2ede200ec1588f1e5ad9a19efb","sha256":"8bde86ecfd6d79fa57cf61ee13a947ce0148abc56a7cea07513cf3c4686461b2","sha512":"20d521f9b887e453d44e819a63504cd793a0f8611866d63373cca47e985ba5c5ec4701dfc6cef475bb877954258bf58fa686d25f3b09c2eb8e2152a741f7aaf7","ssdeep":"6144:80T9gq5TgX8gscru33oyBsQ70t6o1ysnYfwRXQebnLCNwPdvgJ:x3oyBsQ70t6o1yjfwp1n2J","tlshash":"4df419c8abb02c5ed21b8631ac3f89c6f30a75d4b6fc4407694df791e25e116f226678","first_seen":"2025-10-31T16:22:24.717131Z","last_seen":"2026-07-12T20:53:01.347882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":112,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"proposal-ai.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/aeonikpro/AeonikPro-Medium.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://proposal-ai.online/","date":"2026-07-12T20:52:25.103Z","timestamp":1783889545103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/aeonikpro/AeonikPro-Medium.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://proposal-ai.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://proposal-ai.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 20:52:25 GMT\r\ncontent-length: 55388\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://proposal-ai.online\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"0214496abecf780ec7172e9eece36b28\"\r\nlast-modified: Wed, 10 Jan 2024 09:49:37 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-request-id: f5e5d92105bdcfcdfa9dd38bd6c0f997\r\nexpires: Sat, 03 Jul 2027 20:52:25 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55388,"size_decoded":56248,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 55388, version 1.0","md5":"0214496abecf780ec7172e9eece36b28","sha1":"2cf85a6851507f103df9676aae30fb99fb713e17","sha256":"26bcacbf03755770f640ef57654f59d119aecd24860d21c41f1ee57db203ebd8","sha512":"e09278cdbff71ae67f5bfd4c75513b16f8328070c1220ef176d29f18da572d1d7c940901f89d37ae8b330773ffb366d73e0e4a3a95223da9241879abbce27ddf","ssdeep":"1536:OeBVOQujjZ8qSUG/PHRU9WJShPPnLX1KV:LBVyfjBGHBJS5Pn70V","tlshash":"b24302d83c05faac579b363c04004e95f349fe5e3666fa974217c89f967683a603ed09","first_seen":"2024-02-26T22:58:28Z","last_seen":"2026-07-13T08:07:14.874135Z","times_seen":2675,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":1,"connect":43,"send":0,"wait":171,"receive":43,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"proposal-ai.online/favicon.ico","fqdn":"proposal-ai.online","domain":"proposal-ai.online","tld":"online"},"ip":{"addr":"31.31.198.54","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://proposal-ai.online/","date":"2026-07-12T20:52:25.548Z","timestamp":1783889545548,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: proposal-ai.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://proposal-ai.online/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:52:25 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 26 Jul 2025 23:48:48 GMT\r\nETag: W/\"bbd7a-63addb32c4cf2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":769402,"size_decoded":132210,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"cd6fe95f0730e1745cad94667d03b426","sha1":"d08c1698b1fdf9cab6bd569cf800b5a632fe724e","sha256":"f68c9d324733bc9d77bcaea945428a049fca8106028281658ff246022ba8460a","sha512":"824c352996bd452802fceeb34b48c9190e45247ff8c784e69f4d00e1dc8eddb51d6aac81719ab00a0f9b8bce1d5d5b12af178a1cdc04d00734c9fbaa7cceca7f","ssdeep":"6144:b0T9gq5TgX8gscru33oyBsQ70t6o1ysMAUEPusTCNwPdvgJ:+3oyBsQ70t6o1ybArdeJ","tlshash":"2bf409c8abf02c5e921b86316c3f89c6f30a76d4b6fc4407694df791e25e116f226678","first_seen":"2025-08-02T08:17:14.100177Z","last_seen":"2026-07-12T20:53:01.350325Z","times_seen":46,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"proposal-ai.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}