{"report_id":"712e2695-a88e-4476-adaf-6abb3186bada","version":0,"status":"done","tags":[],"date":"2026-08-18T20:30:59Z","url":{"schema":"https","addr":"toad-proposal.xyz/","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"172.67.133.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"toad-proposal.xyz/","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"title":"El Toad Pepe ($TOAD) — The First Pepe, Since 1988 | Solana Meme Coin","dom":{"size":15599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (420)","md5":"b2d686fb9d6c5605ea52bcf66770a828","sha1":"2f86b2f230461adc81389f35d797180d19f55c8f","sha256":"877fcb8cbe091a9abf3ea57406c5862e9d2bdb7f320f43c34523dec789fe0bfd","sha512":"999954b0d4b9bb80e007ac5e445c217d91062606b6eef2d8f527ded798cf547f19088d75c2b10aba4c2cf088e7ecd0e21f3fd13474f99e5bf46af8eb9919d7b6","ssdeep":"192:YNi8KCLK8zt8x26DWy1FV90cS6M3l0viGZ81vydTytyaDKOCydjyUFIIslk8yFPb:isGejJ0j366WSFIIslk8yFPfhXz8x22I","tlshash":"ee62b86694f248b3407280c266ba2f9ab7b0c51bd45a280473ad077d0fddf96f53355e","dom_hash":"domhash6e2467541994887aa029b35bebc7088d","first_seen":"2026-08-18T20:31:01.373836Z","last_seen":"2026-08-18T20:31:01.373836Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"toad-proposal.xyz/","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"172.67.133.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T20:30:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"toad-proposal.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-18T19:31:59.849568Z","last_seen":"2026-08-18T19:31:59.849568Z","alert_count":13,"request_count":13,"received_data":987710,"sent_data":6621,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"toad-proposal.xyz/js/main.js","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"188256270c1b3f0c77fc223bf8d83a38","sha1":"4d3a39ba1097181b7f0af89be8fcce4c8795246e","sha256":"b499043a4b5fa700acf0e98b589d916debd5d96a48a074d78a21d611c22ad402","sha512":"a430f93124bd6669e8227b9944ef5aa73eb71499c57261380f9186d76fca48b684324a8184c13013ead39173e8d07000ccb84282c0c80b2ee6c342ee9bc57122","ssdeep":"96:UkVzTHCJqcwfg4OGQgOWkajfoe0ratZWdazV/:zXVfDDOJAoeKI/","tlshash":"a491021979f234b6447b726d479fb74835760083100ad9027e9cd39c2fa4b276676bdc","size":4262,"data":"","first_seen":"2026-08-18T19:32:03.607858Z","last_seen":"2026-08-18T20:31:01.390794Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/2qlilQml.php?s=%2Fipfs%2FJHJyDsa3AGEURQLbX4CMnQb8a725d82d54830f26a8dc927a7bdcfe%3Ft%3D1787085029090","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfac4c34e9f0a0e959ea558ab5a3c3f","sha1":"4ba04e6070c556606592de4ca2868737fa3e14c5","sha256":"afb24165a82586fd0e9b6f851d044e81908abe6535ffb8ee701a0964887fd21a","sha512":"8d7297a4c58ff744fb1d31e5cf73e0c04f73d9c7bffb68d0bbf61ad78c0882c9978710da3aee5751dadb45a40593662d27c52e5fe60adb3434b404e8b40651fe","ssdeep":"6144:ch5gD6rq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csyq9NWCEiox3Ti/ESVPHSyyA","tlshash":"21d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645587,"data":"","first_seen":"2026-08-18T20:31:01.382689Z","last_seen":"2026-08-18T20:31:01.382689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fd8b63ff93b88afe4feed34c589484c","sha1":"ca0dbaabb988d0c09ea8f49a8819da1f8be434a3","sha256":"d85e4c3c7fba242f974194822acde3aaed9bc3574264f3e913710b8230ca53e0","sha512":"fb9357b23544a9585d5b3057d41e83c245477b6075719f1920e0cc000c80d186c4c645e356979209cd987a6ee08f965a40c2ccfb76b24289ccb572f84f79c6d7","ssdeep":"","tlshash":"27c0c080c130c9f1050c14ca127c539470d02dec01b2e082c5edce4e94dcfc6994c821","size":181,"data":"","first_seen":"2026-08-18T19:32:03.609899Z","last_seen":"2026-08-18T20:31:01.394946Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"toad-proposal.xyz/","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T20:30:28.697Z","timestamp":1787085028697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:28 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Aug 2026 01:24:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6cpOHA73Q%2B4wUrqXG18rBkLpcSiuADKLSsIQZ7fCHHMRHreGO4RNwc7Jwptc8yLqn7rgn1ofsSumiKrQVfmsFKQCWApsihGYPDNVg7DCQS3gXkXpQ3rI9fXVI%2BAzY83%2BP%2F%2B6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a2d3ad360ac98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15297,"size_decoded":5271,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (420)","md5":"830dd2b5cfec17f9f2fa58af3ff6b482","sha1":"57aa492352ac0a51c630e73f89082134b9093164","sha256":"1dd0d27cae391cf4ad175d885ab4d8e7427bb6ba393dd71ac8544c3a3fa359ba","sha512":"1062d446aadf95ce813819a5c9733889f12319ea5ec281c34fefed71069167f11322ce6a2e673bf9aec4d76d6c6f47fe714cc9cd4f15ace0e9e17a28fa283c6c","ssdeep":"192:cNP8WLK8zt8x26DWy1FV90cS6M3l0viGZ81vydTytyaDKOCydjylIIslkM8yFPOj:WjejJ0j366WTIIslkM8yFP+hXz8xU2i","tlshash":"1962a86694f248b3407280c266ba2f9ab7b0c51bd45a280473ad077e0fddf96f53355e","first_seen":"2026-08-18T19:32:03.603671Z","last_seen":"2026-08-18T20:31:01.377683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":89,"connect":16,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/css/style.css","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.121Z","timestamp":1787085029121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 9643\r\nlast-modified: Fri, 14 Aug 2026 07:06:58 GMT\r\netag: \"8d54-658fc775f4880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2EprCg0FkN4RMnd%2FQLMmYkAdsfUcosEETjPoQvADOPuFI5ltEWei5CKSo5c7RM4BCckENOQk9CNA%2BmbEm5MLrc96NNt3uMiQhEUTzGQBKKdrt8b1c5ckE4RHrJ%2B3Mj3eoznDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad37fae78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36180,"size_decoded":10406,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"93db08edc5a22a3ee0f483210388b863","sha1":"68a04e5eddefc56c38bf79a0bce211b8c1bf7a96","sha256":"b3301bf93a505a330a1a6e239229a769e843a35376d36ea248af7eb6b2674cc2","sha512":"7ce312d5556549028df663f12cb9bd195df4afb25c95f515086aa9b05c1ba110ea9c1fa4c59ac90e615f0b8ac130aa07096be5a9f45b06b10b2b14fda773b551","ssdeep":"768:KY8ScSWDsbUEFcUvFHDUb4lCQ6jc9LjONXrLf3iWyuppCF+nXZSEpN8:+nDsbUEFpvZDKE4jctONXrLf3/yuppCj","tlshash":"a9f2b7422f614278bc27e99873db574df319a0214909e9bc75e8101c9fce3fd62adb89","first_seen":"2026-08-18T19:32:03.605989Z","last_seen":"2026-08-18T20:31:01.379154Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/images/stand-600.webp","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.123Z","timestamp":1787085029123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /images/stand-600.webp HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"18db0-658ec13719180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srCb%2FZVx1%2FgSxHBEDGA4O9PRQEZvI7WJ03oLv84mXBjTb%2BnCDAQnmED89mLMwT0oCTm3IxjjAsr4%2F5s5FjzxBtQdtATQweZGmaN%2BV3Le%2FGGIBkGLHEUjYykPI%2BEt61RnlWsMmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad380af88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101808,"size_decoded":102583,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"272c73689e47a16a3ebf642c448dacf8","sha1":"2f3335bb0394560aa8718528880288e3f4dd2c28","sha256":"5a22a14129fbc02cf926a9d8f4fb07453046148a9d7e86eeb63b4c53f1ace448","sha512":"048e141eea535a11fdd8c58ea95c8a0b02f7856d6ac415d184a34774f0452930e5dc288ac0723d78f543a122671c3819c11b87a68d1a26167635d1e271c85d4d","ssdeep":"3072:vT8ncnkd91HVQQdQi646wnyDyCDio0Gxz4h65Ta1a4x/:vTTn+91H+/4WWG121a+/","tlshash":"2aa302e5470bc5e093dc37ed58dbb7a5b64102c634a1cad9b233b966a521e3d1a3840b","first_seen":"2026-08-18T19:32:03.606878Z","last_seen":"2026-08-18T20:31:01.380439Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/2qlilQml.php?s=%2Fipfs%2FJHJyDsa3AGEURQLbX4CMnQb8a725d82d54830f26a8dc927a7bdcfe%3Ft%3D1787085029090","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.126Z","timestamp":1787085029126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /2qlilQml.php?s=%2Fipfs%2FJHJyDsa3AGEURQLbX4CMnQb8a725d82d54830f26a8dc927a7bdcfe%3Ft%3D1787085029090 HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBeXT6IkF8oWx6Ilp1dRhq9fKgb87Gz5VHWPvjyV89mJJO3JPZKJmuWZ8DUuepWpJhiyINUwHdsyYF2ofLiNpA1NsMAtdyC7HJDyrtqb5eJ3mz6CWBXEaJx59jyxhbY7r%2F87eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad380b0c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645587,"size_decoded":124403,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dbfac4c34e9f0a0e959ea558ab5a3c3f","sha1":"4ba04e6070c556606592de4ca2868737fa3e14c5","sha256":"afb24165a82586fd0e9b6f851d044e81908abe6535ffb8ee701a0964887fd21a","sha512":"8d7297a4c58ff744fb1d31e5cf73e0c04f73d9c7bffb68d0bbf61ad78c0882c9978710da3aee5751dadb45a40593662d27c52e5fe60adb3434b404e8b40651fe","ssdeep":"6144:ch5gD6rq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csyq9NWCEiox3Ti/ESVPHSyyA","tlshash":"21d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-08-18T20:31:01.382689Z","last_seen":"2026-08-18T20:31:01.382689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1961,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/img/cut/stand-900.webp?v=a5a061f7","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.131Z","timestamp":1787085029131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /img/cut/stand-900.webp?v=a5a061f7 HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrP1YSDndnFkZ%2BDBM6ESDd3aauyy43vmVTympJtLWm2dhCRXCBkQahXftUay17ti3zRNP4IxnC%2BvHes%2F0SwKTfLrEW1CK2is2sVX%2BAy%2BnRXUGzZX6Y7jynhXF7KeYaNqAustwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2d3ad380b228be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":844,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"640b1b4a9b53349893a27426e23797fa","sha1":"56b34dd183d07900796cfcf5650c5845a6d01b57","sha256":"45295e6195aa5628bc0e7bf8b244943fae97e6ed40661e9112a476b88553618a","sha512":"0b6dc09cbced1d90605f0f8e4b8d7d8ebe79eef0a6fd5113139b925bf609c02c02660ce7567a12865e60112a57ee51b92d9c6cca2afd11ee094acbefa48a2490","ssdeep":"","tlshash":"cbd02b9ee043239b0811149039c111d3238c13e7747a81a86d85e487525867dcd8918d","first_seen":"2026-08-18T19:32:03.608873Z","last_seen":"2026-08-18T20:31:01.385459Z","times_seen":6,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/images/cross-400.webp","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.191Z","timestamp":1787085029191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /images/cross-400.webp HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60396\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"ebd0-658ec13719180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWEnDtVfpD%2FS%2FDpnWDRKaNWuRdKh%2Fe8%2B7PuRIv4VkkAtoCrmU2wKnVaTHTLJ7sBY%2FqMTCLWM%2F%2BiHEDpK6DPFTROTWX5Qf8v14mN6l%2FDFyTaH%2BERfIBfU4BMrSVGkBQJ9WywALA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad386cb18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60368,"size_decoded":61171,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87519b89009290788942988449cd8e42","sha1":"ca8801b4dd165a988358e6d3ed3da30174392736","sha256":"8b811999fb2deee218a2ae4bdf38a9c24f33edc1b3327942daa3e47d7d4e60f2","sha512":"03349858b1defe97fb9e88c16aca0890fdd8ca7cddc50b592f422eeab55d268ff4ff4111b1e236a9cfbb84f1cb5601ca6978be2c593cddb2f15e06010659f3db","ssdeep":"1536:Gtjmm4xnNJOvQywKca5lTYR8KhhOeKCDQDKfe:yUN4Y8d52WKi8Mn","tlshash":"384302a2f6ff210cbddbc09c00a0ba42271d91d77ef7524848eef580959e6f92de8811","first_seen":"2026-08-18T19:32:03.600888Z","last_seen":"2026-08-18T20:31:01.386699Z","times_seen":6,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/images/favicon-32.png","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.361Z","timestamp":1787085029361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /images/favicon-32.png HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2472\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"9a8-658ec13719180\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEvcUAyL1EHnRHbe5jw8mRv1oabCssnooD1HTvmI0dGrn00h8oDCqvUyMpELEwihnOUXGUjKJ8nKI6QqFCIADXQzty0bhZ2zb11ObF1diRV7VxB85gd0r3JIHSErpqAbniPv%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad3978e58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":3179,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"ba004ae49f0eb1fd69df26c62a9d5332","sha1":"01f18c440b751d04d08d06275096aae4bf1df1fb","sha256":"b8dc2a14666ac9e7f2912cf3591bec934618da8046b4e35f2f6ced3a8759520f","sha512":"a42fe98911e54a7c4433c5d44a7731e580bcc9f12d99f1d8c470c5a70a335e5b5abad90da4f7c21940819611958f7df51c197a925cd7e7a696c06b756713e431","ssdeep":"","tlshash":"e0514a3ea04024a7a01d729ee45e10897e5e56ea02ea6924ff4f10903dd25b9b2649fa","first_seen":"2026-08-18T19:32:03.597567Z","last_seen":"2026-08-18T20:31:01.387817Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/fonts/luckiest-guy-latin.woff2","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.118Z","timestamp":1787085029118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /fonts/luckiest-guy-latin.woff2 HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toad-proposal.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17372\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"43d0-658ec13719180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUb6Mor4nPdf9zCTSI3znak03WV0uyacypibq683NG1Y4Ah%2BSLluHO%2FVVAh%2Bzw0XrBWQk9kYCEd%2BrXnxSdWsymrWmb4qrhJlgWQncVzWqLmJI7QDNbtLjZtOphHvI4TFWPDKPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad37fad18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17360,"size_decoded":18140,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17360, version 1.0","md5":"70322c317b1f4e2e17dbc6b672f95f5f","sha1":"f3dff7c50e1aea33814c6aeeca177ae3ff900bfc","sha256":"3877b522181765adf66ba89bd68d288ecb9f2483b441baab3424646b0c7aaa0a","sha512":"83048e60c06b142d87fc1c236e4c1c025953bb9fc3ac9913f04660738679607c3dde4cbe7c3fd563e09b4609d284420ebcabc0637da58c48cb0db208087803f1","ssdeep":"384:WfC2S+GObRDijMwcY6tE+ICzuxdyMAngwp:W1S+RTDxICzPvp","tlshash":"1972e1edcab11465de8510ee2f1a3d89a941fba8c31043f19dc7fe56c0a4e34c798ea0","first_seen":"2023-05-03T01:37:24Z","last_seen":"2026-08-18T20:31:01.388931Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/fonts/archivo-black-latin.woff2","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.119Z","timestamp":1787085029119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /fonts/archivo-black-latin.woff2 HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toad-proposal.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18627\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"48ac-658ec13719180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kSAE%2BEZB2m%2BQbsRrlsjtUWgwMPO1K5VNe1dWMfSqXqxk%2FZ4Q4kDEg1G2VZy0bYGgGatngX380KpazP8vRfAhITjYW8Hu9XmHeALtrweDnEbwoqZQ4pd%2BAE%2BhbAOovRvUW1yHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad37fad98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18604,"size_decoded":19397,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18604, version 1.0","md5":"4b6914a69e6a586fbe253f73d19d90b0","sha1":"1f965709606b88830826c45ef0ebcfe3484aa674","sha256":"25f33e61cf995abd6be62931cf03bf427286259177b43618cc410ee0157cfd30","sha512":"c279d8584561068ccf6908f37ea6ab33a981b7646d037108a30b3c886c5dd4e53a4107cbe129d430c6230e1528a466a61c3cb3017df15aa50421c5e0be4c166e","ssdeep":"384:7OXmkDf7dA0ytyin9ES4S8sDqcMHXuOsR+qSg43T47z3vt:7cmkDTdTunWSrOsQqyU77t","tlshash":"7c82e13d73cb9ccb5929ca22d53c821d863af6e1275c94d1b0b2e8421e1cd9a71d494f","first_seen":"2023-05-04T19:52:48Z","last_seen":"2026-08-18T20:31:01.389856Z","times_seen":5079,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/js/main.js","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.124Z","timestamp":1787085029124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1428\r\nlast-modified: Fri, 14 Aug 2026 01:20:14 GMT\r\netag: \"10a6-658f79f64dae3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naG44TW6D7PbjUsfFQo%2FuvMI2NlsOV0sdNdu7lYn2vQayJPe%2BS%2FS4MKmOz8kqPm%2BZkVwXWThd55Ajz3mhCcFl4NE%2BOVOncUuUB19ncI5J8cX%2BTBVFaGDJQ2NUa%2BguBYVzLeFTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad380afd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4262,"size_decoded":2206,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"188256270c1b3f0c77fc223bf8d83a38","sha1":"4d3a39ba1097181b7f0af89be8fcce4c8795246e","sha256":"b499043a4b5fa700acf0e98b589d916debd5d96a48a074d78a21d611c22ad402","sha512":"a430f93124bd6669e8227b9944ef5aa73eb71499c57261380f9186d76fca48b684324a8184c13013ead39173e8d07000ccb84282c0c80b2ee6c342ee9bc57122","ssdeep":"96:UkVzTHCJqcwfg4OGQgOWkajfoe0ratZWdazV/:zXVfDDOJAoeKI/","tlshash":"a491021979f234b6447b726d479fb74835760083100ad9027e9cd39c2fa4b276676bdc","first_seen":"2026-08-18T19:32:03.607858Z","last_seen":"2026-08-18T20:31:01.390794Z","times_seen":6,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/images/logo-64.png","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.133Z","timestamp":1787085029133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /images/logo-64.png HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 8476\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"211c-658ec13719180\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsyrA8wQB4JfBbp9ANZdGheIXt5hxTKH0h%2FXP8T57KhBaVkXFfHJpCnuCjXm4jAO%2B%2F4vS2mzetwQRWfmw3Dp6aqdgWFCeyhfkAlj1prxm9lGMoZcv0MagrbLYIMkJLHhBt6KnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad381b388be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8476,"size_decoded":9185,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"7179d2bd5237cd47d3c918fb7363e4ed","sha1":"7539113f20a2ad785e036a134c7cb923db908368","sha256":"5c529ec8997e512031f4705b46e68f4c63ad3e033e2ffb9e9ec75e0caca42413","sha512":"4fa7465c42280275ee69d09f4a86f3b891a546f4372e016c20ac4bce90acac45347d6aa31a2abf2415e9cdf65b93efe01dfbc022e4ead9847e870520bc27e9c0","ssdeep":"192:mSKSEbNm6E2pZkmIv85fOeqX9QsGb8FwjtVqL5gUeryrgtuUlA:JSNnEoZWKfrUGs4z5VHUHRv","tlshash":"8e02afce27b50707a4e485c782bc2b0589b27a30e095ec6fde105aef5ee527ebb40465","first_seen":"2026-08-18T19:32:03.599849Z","last_seen":"2026-08-18T20:31:01.391816Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/images/favicon-192.png","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:29.359Z","timestamp":1787085029359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"GET /images/favicon-192.png HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toad-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 20:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 67549\r\nlast-modified: Thu, 13 Aug 2026 11:33:42 GMT\r\netag: \"107dd-658ec13719180\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXkGnsPRjjMW2DfbtsdZpY%2F9BxUmAr5pg4%2FxUX7BdOZWFRl8IEkO%2FF0mc0I9qHM863Quwxi%2BysOhtNDHI6LvYTtkA8%2Fkv3xuG%2B46LpRhoXtjOIe7BX%2BTTHMrux%2Fgv1b%2FX%2FOLHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d3ad3978de8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67549,"size_decoded":68277,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"9f524fd72c0082fa08bdf412001aeeab","sha1":"43507ceb2e811cc0ffd8015ee2721cc4b6d3269e","sha256":"c15e5d3a4373d5721420bb908798b354d6ab303f66b3897852326390d093ab0e","sha512":"953e4aaef6da1fb4f9262ef7a5dc01b63b9b678cfe607d481f14205fd8fe4a508f06b723857a54ab1491772b39e32b8466badb5cfeea8009c218af0486af0778","ssdeep":"1536:2keswJCGkATLqu1roZ2egmdqNmkjRv+rztroZ4nsCQwP:2kk2ATLvroQJmdqNmkj4z5oeQU","tlshash":"e163f1ba603a706bc31355b2c9a49937c235fc6bc9c83bd4ae358792e14ced0c4656db","first_seen":"2026-08-18T19:32:03.602041Z","last_seen":"2026-08-18T20:31:01.392811Z","times_seen":6,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"toad-proposal.xyz/2qlilQml.php?s=%2Fjmpd%2F","fqdn":"toad-proposal.xyz","domain":"toad-proposal.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toad-proposal.xyz/","date":"2026-08-18T20:30:31.588Z","timestamp":1787085031588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toad-proposal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 11:15:39 GMT","end":"Wed, 11 Nov 2026 12:13:06 GMT"},"fingerprint":{"sha1":"62:79:2D:04:5A:16:FB:E5:F6:89:AF:2B:F8:47:55:BA:49:8A:AE:F8","sha256":"40:1B:3F:72:8F:36:8F:5F:FA:4E:44:C8:53:4D:41:B4:F7:15:AB:FB:ED:89:20:BC:60:E6:50:B8:23:C6:1D:E9"}}},"request":{"raw":"POST /2qlilQml.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: toad-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toad-proposal.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1297\r\nOrigin: https://toad-proposal.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1297,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB3wLUAhcACwARAwQDJQAxAyAAAgEASAMAAO8nhn2XtsKCAY4C7pbwXkKj7Mz494sCAAAbBZ7zMPzxdx53OOZ-As917WMxNbDSBg0Lqe8VdHc_HSpnBb7p7fuMsG-TJQAN9D7M2Chmcxpkj2Ats1d-iW2P0POnU6AvccEQRE2KnODYvPhTjNH47RLXxNceadGHKOpXFZGCffW3hco8PNzDKLP49SrntEqA5oQh_egJjqpamjgxzYfO9Rk-mxgAWZE7UY4nKK7MrDYLLo13MgcsuTZzwNe8zHVw9BofEdQWBWIrfv78eVbeQMvGF01_CzXggr2AAXvhZ1jacIoTDOWARERxyMulZgcBk2bqf3p4f2bC2O-IPlBCT0ijWWSMKNp2aojegFifH4gRFQsw6lAX0WYDdGrrwzEtnMejoXCw4uVthZxifSP6zDKfBPYwopvjHhn3rArILPMrgiAbX72Z6OkisNUax5L1vPTWbg8wmDjKpodSsdfA9ewTu9hvlWArv_s6eEpgfSVU6RJwiVGizjDIjIpRkBovF2G4dkBNemV_Zctzd-DBKxbCJZteEVRRP4KuPppyBUkKtFgGow6xpAazaHtD4RnP_R5Qo5R3JLiIrL4dIrGku1LS7Tyv-zwnHMzzgWVJdwids80EVvfpMdvyyBMKK8Q7wcBwyO_5Q5gVVWehxb-kqCJ1twTL5FWmyxgeWPDCqj9UJYkwqxw0WqCRjIsxaUhLr1t3SeXx_ZdM0esk9anB8-yZv4SFZsx1_77Jo7TQUpaZP_071UzcwcvlSLg0bv0GSLB0gs578RgiqqZ3mq-AgyBfeMbs9dhgeTkDiURZQMZD_6aY6u2qhw0whHVN3nTPYs-XFDhlfkIjpoh_ktqrGAz9GFeNj700BpenIyucsT159YBrYhZPiI9nKjlERihsAOnUVvSf0jB3vMRKk0grskm88062qnmZlrpk3HDZpaHQqMRIXBK45clJrx3d5iohodf7deJGJbuqM3uM72tYK9ifgP5-havRwwiyu5OTZ220CUSLRPcCKyVbfGltaK-Wv3ZCNCLMl_rQrZojIUqcEej2ZDGOxbcmndqCUoeboBx8SIlncvEjnY9XSPmWEj8ZdlxicX06qkemDipt8lIF_h4UmIHmy5NGv1PgyQQiIgxxAvsm0d9mt281qSVnNB1bUDMD7-ZmPBTEWS4vh9UqZZw-ArTuM09w7BA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 18 Aug 2026 20:30:33 GMT\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXCtsTH2SP4hL8eUcuKlkbawMSQMtHug%2F3hX3JREXdtps5jaTYuavDof5PPB9AjVkmGzo6Yn1moiQvWLnH8vY3TMtSqIslyBP66ftVS7lYw86KAHJjcWkLJLU3d920%2BjepB8Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2d3ad476d048be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2523,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T22:45:00.033753Z","times_seen":17962883,"resource_available":true,"data":null}},"time_used":1715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"toad-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}