{"report_id":"692348e5-f177-4c4f-bfc5-d549e8f86cbb","version":6,"status":"done","tags":[],"date":"2026-03-20T18:36:35Z","url":{"schema":"http","addr":"proposal-frax.xyz","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"proposal-frax.xyz/","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"title":"Frax","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"proposal-frax.xyz","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T18:36:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"proposal-frax.xyz","ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-03-20T18:36:37.721424Z","last_seen":"2026-03-20T18:36:37.721424Z","alert_count":10,"request_count":10,"received_data":13625974,"sent_data":4520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proposal-frax.xyz/","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4eba499f8ab0bf67d1a7ab6bbc2a6311","sha1":"cfb6dc2cf970d9cc1beb1c89a69cddd1530096f1","sha256":"a5354c9733042b609a3c3febb7abdf5fa5321a9f7bfcb314a4e09cdaec641efd","sha512":"8df85c2117250fbb872e651a88e7e78f7c5b03a1af5be3b411233904dc6a61df048ecc51fa477495854abcfb80a677fcc2d5031d15711421d44686d4cfc8e6c5","ssdeep":"","tlshash":"64d0a71d3030717a28cf282d084f048a7f328411e2085dc9d5ec84447ef5e6801d0848","size":219,"data":"","first_seen":"2025-08-05T21:04:32.27941Z","last_seen":"2026-03-20T18:57:56.471675Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-06-13T05:32:08.573707Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"proposal-frax.xyz/","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T18:36:11.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:36:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 23:24:59 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixBmqiJvfCD5IfEBHE%2F0FtJYzklcc8wr55cJia7OKMt5XNmh%2Bd8wfQc8PpihM6lVK5wTP4cUbuCQHLfFdSTBavtWY%2FQFCRQHkZRTHMXdNqSe\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9df6d22d2c85e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166593,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11996)","md5":"bf87398ceeccfaf2ff399f545a1ba552","sha1":"9174fb1935a051e406a977c4071114dd73eacf30","sha256":"7bec6853acd1d3bb9528d591f192e4fb9b37da408ba05eb3d54744613ef033ea","sha512":"29359639503071c3f2f5ddce75d50bb78b02d2a6d983d44e6ce1e459832402ea9b5459f834d32a7cb954bf5cbefd691341d2aec108ee6ae519875ac5f75eb723","ssdeep":"1536:kdodJ/VpnUmfxkpeUmfxkpc8Fmg/Um2kpCK0hTRE/cIvzoC5:KtbhmgnFc8","tlshash":"72f319e5a7f402f8e447c3e8ea71a528771d90b7e612c258f39c4b91af42c9cc94b9c5","first_seen":"2026-03-20T18:36:41.682369Z","last_seen":"2026-03-20T18:57:56.465902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":83,"dns":53,"connect":8,"send":0,"wait":76,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/index-CLQqbumX.css","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /index-CLQqbumX.css HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b349c8-17285\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Zkrd0QXCRs6NZQUnc7sIKeewcqavACNZSTjZEAeo8YdTQZJ%2Bv%2Bl61qv85bww81WDADQ%2B4EmwykyRWSYXT1lqqI8VjCk57UlrQoUhpEQ23a2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f2b8c7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3c65da632982015a21cae4b3df59505a","sha1":"03cdfe564f03420ae28d83d505fbea45e2123e9d","sha256":"9e1f807eff2dd18c026346a47c60536e72c52924c2e3096227ac5f5d119f5407","sha512":"a145d9563a50fb5c7943554c3fcaeb9cde3c61adc5a1a8e46dc975585ce2efe7862097398d39bf36443280423c30aafd4f8c4000950b1bd9aaba6585ef75a120","ssdeep":"1536:uzB7rbFqg+qjXlhQRbc3Lizlx97bkdCh2CMuQQp2thVM/ZnS2t+evrxgQr5kPUFT:uag+qjXlhQRbc3Lizlx97bkdCh2CMxM7","tlshash":"7d9396699a64207f7c27e1f4c3d879acb51af1d0de3b06e9bd8601246be23f60d67904","first_seen":"2026-03-20T18:36:41.683973Z","last_seen":"2026-03-20T18:57:56.469519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/BlackRock_wordmark.svg.png","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /BlackRock_wordmark.svg.png HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b349c8-4071\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nXaXg%2F%2BS0xaFKaBMi5kgaaX6KhsY1J06qhKFwqHAWIvALqr0fxC6rXuB3Qe0JZmxwGkmW8rXGjDc%2BqsgHZLX%2BEOZaYvi3kZ7%2F0%2BrsA9%2B67H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f3b8e7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 186, 8-bit gray+alpha, non-interlaced","md5":"4f9ceec3b869132cabf7e2d31cf67f40","sha1":"d3a6ac50a230d664996d9d1ddef44c488060c672","sha256":"fc0b15463c68a8a2470c03be3800a5acca8458723dd16b1936962588d02c49be","sha512":"7bec1a675124fbd8645d4948d300df535ecaea6cd86d119b8d5ba04cab05786fa93f1a4641a532e2fabd7890179f737e0bc978dc928aa0b2d66a5a352d155006","ssdeep":"384:yx5lbUidSxdRnLc7A1jvz+4EysghUmSA+xUfDgs/hQ6:yx5lIoYltLzyysghboUhq6","tlshash":"5972c0266fbf2b12c910ca5251d21984992634dc3a240965e1ebf36428f2fc576fac88","first_seen":"2026-03-20T18:36:41.684912Z","last_seen":"2026-03-20T18:57:56.470525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/bridge.png","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /bridge.png HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b349c8-1484\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtjiI3hjZJ4V45Xe9JYoNQyJMOJq8IMw9unhOENP1NsHd8EryYG74i%2BBelqQXEFkaC5wvCgjc8MsrewUvmGxJh%2FRkvTTbmzjR%2F7WfEgADlrg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f3b8f7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"148bad472b43657f7f084bae123deaae","sha1":"c0af37ed6f1f6e823ae54602e57c1a58468658cb","sha256":"89164ad103da608581cc34b449affbfc89188cbeede7e5fc69789c6ef8ed4add","sha512":"bb43815e99fa0290681d0fa5ec4fd248a5070f00d990cec9d7ab8f647c83e575c9463e430d41375b629d209cff1b255851858fbbcc7b10d14ff804589bb29c3b","ssdeep":"96:fSfItbEbfr1djxi4T4Bsmld+SA1ix4ai8URMkNbU6+5kwWHDSY:fSfIhEbjfjx14BsmloNiU88ZQ5kwGDSY","tlshash":"25b18ef59a25d4a72391f3c355b1de7b5c321a89c4be682ac789091c0816ffd5224585","first_seen":"2025-12-20T18:37:04.158227Z","last_seen":"2026-03-20T18:57:56.466567Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/fraxnet-desktop.png","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /fraxnet-desktop.png HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b349c8-18f676\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hADfghtMEyTeNAtvjJeG2XfWe7wgka8joIPlLe8a%2FbaaZPrupQfSWNwJUjXuJpiHcibMiEGspVXSca3G97jPxlRDgYKMSY9sesLjUTxenhlR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f3b927dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1635958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5136 x 3063, 8-bit/color RGBA, non-interlaced","md5":"d1a0b63c3cf1486cd70dbbc3679df736","sha1":"211d1be456baccd9ad68b373333ca72b92c880cb","sha256":"4d53b4d3484618ad8d990e15d25b6e7c5c7675c7cb14fe4d685373517bc1ed78","sha512":"b0b8a41adb5520f76e29e253b373600c5e62d9dcc717f7cc44ca40c8136fba6cd11d43c3763fc91e84fec21ead7d19882fc7952462f4edec95bd7368cc842690","ssdeep":"24576:KrHMpMsDBb1aU/8RIjakGaVpe16LgpsAeGJV4P:KIimBbgUrjpGSwagSaJE","tlshash":"d6259b56eb64607b76011514261725d7a2780e3b30a4de6e2be7b0af1b17ff4eeb2c04","first_seen":"2025-12-20T18:37:04.166283Z","last_seen":"2026-03-20T18:57:56.468135Z","times_seen":3,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/assets/eleven.js","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Mar 2026 14:46:22 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69b1803e-a363a2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpUR6Vx31STvsRo7Ez%2BrK6CM%2Fc80IJt5AripeFLbwR1%2B%2FWIyhjDF3VwjsMjFHrOMaptZtpumDZWw76cAol0o5%2FqXYqoHYU9JeINp6C%2BjpV%2FJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f2b8d7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10707874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef85eefe6d6907a1c3fb17ba26d2c142","sha1":"248b0acf7877f826b455370ad924a1ae3ba307b3","sha256":"ed66749e25cde3a299d54870db0f1490d8e97c47f844c70a37ef6013e813fe56","sha512":"69a0f5e8850ac36e7448c6c34440f9ae88f48368f289216b397217fcecebd68171404c5ed4796558b00d9198b2a77713f2b60ec9ad880684370e47aef0cfa997","ssdeep":"24576:oA6q9DtJvJk62FCxIYFy/W5OwJy0k1CnsF0kZ:o2C/Z","tlshash":"7d25f8db3d9679a6023234f73d262056f06edc49b15cc198f3adbc29f95070d68bb628","first_seen":"2026-03-07T01:25:58.928789Z","last_seen":"2026-06-13T04:40:22.071435Z","times_seen":146,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/wisdomtree.png","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /wisdomtree.png HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69b349c8-91e2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HdMeaWvRVjOXEBBpiZ24e5%2F92GNQipTgc3n7ekrqgKRfIHDdZdrBGg03KW3Fu4JyO76Kr%2BdBrFGwYDRXRAT%2FeD8MXkmGIVQKMy00df51y0y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f3b907dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1518 x 578, 8-bit colormap, non-interlaced","md5":"69ebb5bf52886ddfdae592da81b8db28","sha1":"fcb2facd13391af4dd6dcb10def9abc6b2083114","sha256":"80a457113fe4bf1643029ac23e15715c42b2c70e4a0b186829aa7ee717821796","sha512":"6cded7fd595dfca5babf4c0d2b5af15b2e474310637cc2b343cda996f81c828f21589ddd63ada9117253daeea2994fb5413decdb21f3930eb6e99f35e3935f63","ssdeep":"768:YMv7PDQLqtwoCz4HQzwXcailqGi2tnHxzaLDNq+b+JcOLom2+XMzE+b9SZ:5vDDQLwwoCz2W9tnHsmXO9SZ","tlshash":"03f2f1bbbf580b17cbac02b046cbded9507c83be2513814ab4d3c968d5dc194ce6e649","first_seen":"2025-12-20T18:37:04.16076Z","last_seen":"2026-03-20T18:57:56.467267Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/frxusd.png","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /frxusd.png HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"69b349c8-6c82\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZjdJ0mwx6U%2BsMAHnkkhTO%2Fn2IMHQBEMsrX32fqtSg4u4OKWgTWzySYQykAJwhVf4HNFn4yLD7M4A%2BC62aMKVxH91FPXC7AC%2FdO6w6zwyvRG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d22f3b917dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1181 x 1181, 8-bit colormap, non-interlaced","md5":"956e3a3a22eaa8b82b5af5af39dfe85f","sha1":"0356f439d718f9118748314388fe1ce6302c058b","sha256":"465a5e4cd297e4c452ef5cb458bb3dd4f5f242add830777422803f48ab24a91d","sha512":"f55adfde43f609bc4fd2698802a35304a521bc1426566673feebfee54c1c10060863ea065ba2b9bd05e5794c7993f4fb013a18e99789bf73b8a41923a03939eb","ssdeep":"768:StuQ41BexKaX9LVz4ed+nBdCPJ+GMq2zKHwQN1bU:YCexKaT8e8iOqYwu","tlshash":"68c2f187f80cd67faa531ed910f2a23123339e849517ae138522bb7bd5794b4f9c2115","first_seen":"2025-08-08T12:27:31.004284Z","last_seen":"2026-03-20T18:57:56.471158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/home.mp4","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:12.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /home.mp4 HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 24511838\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\netag: \"176055e-64cdbf8900200\"\r\ncontent-range: bytes 0-24511837/24511838\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZkqdqV%2FeZRIV3LCr5BGs30jOEapjYSuO9ghbJM9yREJBXED%2Bfgw%2BkC4wiKMiKm8mXFiW%2FsnutrmVJw0FfQQxsuub%2Bc376yqJN6XkLCqXmJR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6d2318bda7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":911988,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"38d7a2d87da460dddb31d491850faf8b","sha1":"547a2c2cb4f4d723ce078333329c873c87d941cf","sha256":"210079b5bf1e979a066479cb194505a89f0df0ae53f58c5f1a50683af3e655be","sha512":"75f8b61ea39ebee1a1277d844e6e22360b85bdfc8388067e25fe129f02aae55d7bac005ca54c1ac5567f7bbf054acd59ae3985dc95e7842753cd0a0283432bc6","ssdeep":"12288:mOM7VxlMgikwz8vUzI/1vWzPYIPlVx2NsFpviuVYXCS6ACxx8NcOzv8zFzPWF:mXnXm4vUzbzPY07nvvdVaCSyLtOziPWF","tlshash":"0e15234a2fd16650f3874274c8e0eb6761b5c73a178a06978eed93613cbb6f4486cf18","first_seen":"2026-03-20T18:36:41.690736Z","last_seen":"2026-03-20T18:36:41.690736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposal-frax.xyz/favicon.ico","fqdn":"proposal-frax.xyz","domain":"proposal-frax.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposal-frax.xyz/","date":"2026-03-20T18:36:13.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposal-frax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 22:50:12 GMT","end":"Wed, 10 Jun 2026 22:50:11 GMT"},"fingerprint":{"sha1":"9E:38:C9:DC:92:D9:B7:42:2D:72:8A:61:A3:5E:E5:D8:63:E3:AE:8C","sha256":"C5:BA:29:4A:B4:71:66:7F:01:B2:D3:43:60:B3:79:D3:AC:74:8D:8F:23:B3:06:19:CF:30:AD:6B:69:E1:A1:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: proposal-frax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposal-frax.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Mar 2026 18:36:13 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M23CHufVETmvVLkqjJ0FB8V4X0wqr9AXasC%2BplUkFC%2BfLBiPXAFLIpNGE0%2FP3Mryr6aBJ1nhdJRR%2F12rj0%2FBiwJ19TxV3ZLev%2Blx%2BHNsQtVB\"}]}\r\nlast-modified: Thu, 12 Mar 2026 23:18:32 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b349c8-3aee\"\r\ncf-ray: 9df6d2368c707dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dadd1983e3d4b184aeeba85a89205f14","sha1":"25aa094b2ee9a5e7b44f17f73f056c61d630d41f","sha256":"76b715b6b95c125ace2e5bdb9bf5ec43980a2b691a4a5179cc844032a8417da0","sha512":"cac26d052deddd8e196ee9a8a35cefb50b9ee5fedc58df7a0feb8d64861c904c9e14197992884da0f8411ae5bfc75e054ad981b846ab25e69051744ee5600b4d","ssdeep":"96:j1a1at7DfiEcbvCK9+1/j0tCKDI23AcazJleyQ2Yu0vK15N:jnjcb0mtr02Ez115N","tlshash":"3a62b7f11656cc19ee1613f54967ca7e02badc6418b2e51708e7fca77eb23530946017","first_seen":"2025-07-16T11:04:34.020126Z","last_seen":"2026-03-20T18:57:56.465018Z","times_seen":5,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"proposal-frax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}