{"report_id":"91889091-e9bb-4624-a69b-0928dbeab7f9","version":6,"status":"done","tags":[],"date":"2025-08-17T01:52:50Z","url":{"schema":"http","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"title":"Usual Interface"},"submit":{"url":{"schema":"http","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T01:52:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"proposals-usualx.org","ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2025-08-17T01:52:53.748937Z","last_seen":"2025-08-17T01:52:53.748937Z","alert_count":21,"request_count":21,"received_data":7518447,"sent_data":9529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.ipwho.org","ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2025-07-11T11:18:46.569057Z","last_seen":"2025-08-13T13:06:08.210473Z","alert_count":0,"request_count":1,"received_data":405,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-13T15:26:13.000794Z","alert_count":0,"request_count":2,"received_data":1521908,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proposals-usualx.org/bundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a1403d44c3ef21e8565364610ef8162","sha1":"84950149b00825e06cfec2e7d676da12bf3558b5","sha256":"370215718cb8795438d7d2aa01fb8e6dace5ed076110dcf4d5bd03550bb8cca9","sha512":"5b4a132f368d2bb4b8278b235d6f1496058d9ddceb8e78dffaf2feb40fa66aeea7ee4f324bac584593e18e0ec454d0d86d6916b527e32602ab2345fb56a8a262","ssdeep":"","tlshash":"0be0d858b268633747e36761c50b63c6fd614095d443e0114101c8c74ee8d461c7ae9b","size":360,"data":"","first_seen":"2025-08-15T04:02:28.969214Z","last_seen":"2025-08-17T01:52:57.0124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/bundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"Function","is_inline":false,"md5":"166b42e6bcd63ac7cea098a47ca193b0","sha1":"33ad54123cab970ad103e949f2addc3649011073","sha256":"0d91614dd9d570f5747a0511b4a3988558cfe0d8e96554737f5a1005d59d56bc","sha512":"2136642be925d0474f20748229ff3c0b65acd83a9cd74af66bbe8b05b28aa07512d5c8b014b367e98d273ed4ca10bb2f4ff7d164fd6afa37dd22d1d91a80fa72","ssdeep":"1536:YFlA/ZENxq2FS33aUXUQBvqPdVbxqu+fXKJ9VxuYKIoNz/0CDvwfKsiSgtSXMkuS:kl8ZkxWxMCk5Is0mYm","tlshash":"5c14e847994224bacae07cecca9171fdeb4795890a0a912bd333f1c06fa454ee5f4d1e","size":203123,"data":"","first_seen":"2025-08-15T04:01:32.5251Z","last_seen":"2025-08-17T01:52:57.014607Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/fpbundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/main.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5796d140b6ff3361afa0bc286def3575","sha1":"06b31701a0fa0bb1589c91923e895d5e172c0567","sha256":"9e03b9ff4e3dc84a853d9277266d8187243e360540c33f951f0fce40f473f93e","sha512":"3246c21d2b2667bbae05e2416d75778d79e254419317814f5498c49d5c363bda6974105a0ed360a170f2a10737ce1e65946cf2555466c801ca20285eba495326","ssdeep":"1536:DB3MpkeygTekF2tcxthTZqRddbxqu+fXKJ9VxuYKIoNz/0CDvwf2MiSk/SXMQoMg:V3mFnekFucFScQDIs6iA","tlshash":"49140b879942a4bacaa07cecc6a179fde74785c90a09912bc333f1c02f5456ee5f4d1e","size":206867,"data":"","first_seen":"2025-08-15T04:01:32.512485Z","last_seen":"2025-08-17T01:52:56.968387Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0559db7510505753c41ca63591accc9b","sha1":"ee050dcc6f5acda01849c1972fd083c56a950d4f","sha256":"2b62d587e016d22533f0e6b4823c2e35d103a3cf7ff88616bafe8a72961c9fe1","sha512":"eccc43fbb836b71b951c36c21a368c6a49a63eb4b13a9018a72f95d0b917c292385f05258be8181ed1081cba4131504fb595d91d563e73f5b6e41b311cc15c92","ssdeep":"","tlshash":"85d0a724371496bd72e366e1ca4db286dc201561d843d401c91ef44749d4e4638b0fde","size":237,"data":"","first_seen":"2025-08-13T13:06:13.236887Z","last_seen":"2025-08-17T10:59:39.236338Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"959a7c14fcab12ea057da2b8efbb9940","sha1":"b384e2a5ff517901952e031fb3e21be786a28048","sha256":"cd387dd399f74ee13dfbaca77767cb7c1b2cdcde227b014a1945bf49bde731a4","sha512":"e4e30ef5a4d5ca2cd66c50b88a91f9e72490d19301a353f772299ada44ec530cb71f1f5c0d6aa20d870f46ffb21dd564a4e90844b50bf93aedcdd55715427df9","ssdeep":"","tlshash":"03d0a7942a14133853e75660854f92823ba05445e4e2f001455de4c70ee4d0514bacdb","size":223,"data":"","first_seen":"2025-08-13T13:06:13.241301Z","last_seen":"2025-08-17T10:59:39.240045Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/modals.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-mantle.6f00d0aa.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-mantle.6f00d0aa.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2992\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 53, 8-bit/color RGBA, non-interlaced","md5":"e0106c590ec50edb6d5cdd7a5efa6dac","sha1":"de63dd6ee74c78559b5bba33cb6e6de588484863","sha256":"e899d177cceb2e70a7fbd9be16c342afb6119317d00805135b90a31dd09ef13b","sha512":"c9f0516eefa3fa9d71fbfdf99917f0bd1f6386c00765f68cd9c7b51e4c55bd2177236629833960d914834a67b8c435e4e93ed292b3068cd77e49cb04afe6c20f","ssdeep":"","tlshash":"7a515dc1422cde7ae0f2871d5276161efe3211211e2305add157f75f48e2b05a98e2f2","first_seen":"2025-08-15T04:02:28.966363Z","last_seen":"2026-02-18T13:33:24.039689Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":194,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/main.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:25 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 206867\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Aug 2025 14:59:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206867,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5796d140b6ff3361afa0bc286def3575","sha1":"06b31701a0fa0bb1589c91923e895d5e172c0567","sha256":"9e03b9ff4e3dc84a853d9277266d8187243e360540c33f951f0fce40f473f93e","sha512":"3246c21d2b2667bbae05e2416d75778d79e254419317814f5498c49d5c363bda6974105a0ed360a170f2a10737ce1e65946cf2555466c801ca20285eba495326","ssdeep":"1536:DB3MpkeygTekF2tcxthTZqRddbxqu+fXKJ9VxuYKIoNz/0CDvwf2MiSk/SXMQoMg:V3mFnekFucFScQDIs6iA","tlshash":"49140b879942a4bacaa07cecc6a179fde74785c90a09912bc333f1c02f5456ee5f4d1e","first_seen":"2025-08-15T04:01:32.512485Z","last_seen":"2025-08-17T01:52:56.968387Z","times_seen":4,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":75,"receive":56,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/bundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:25 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2510372\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Aug 2025 14:59:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-10T23:25:47.366161Z","times_seen":671,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/ethena.47bbc61d.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/ethena.47bbc61d.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 6669\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9794b084d8c1e1c2993f735ccc914163","sha1":"baafb9187f3faa5a45899eb43ccbf93ff8255d71","sha256":"51ba7604b935770f5ae7a2fd09429eab8b9ad07170d96f1309c326c9635cf8d6","sha512":"12ea6ee05f051d548f95797c13bbc81a208e1b81feb5beb921306241ee8076dae49a4f1d3def18d7f41f2f28b085653cc16d942bd4765cc8ab14f77083ad0b66","ssdeep":"192:dps43J+l7T85UbmXzK5/mdQSibuoiTMROwg9+:dN+J8uszm/pDbuxYwwk+","tlshash":"b4d19f9c6b0401b5986af3b538b24142e3996c1007b2c7dd355c15ffdf6c1982b95a4e","first_seen":"2025-08-15T04:02:28.95676Z","last_seen":"2026-02-18T13:33:24.035989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipwho.org/me","fqdn":"api.ipwho.org","domain":"ipwho.org","tld":"org"},"ip":{"addr":"69.62.76.167","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:27.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 16:08:31 GMT","end":"Tue, 14 Oct 2025 16:08:30 GMT"},"fingerprint":{"sha1":"87:88:D2:F8:B6:23:06:38:98:C4:B0:E2:06:68:C4:E3:63:EA:AB:2B","sha256":"21:76:B6:9A:29:3A:7D:88:85:23:77:5F:33:A5:A8:D9:7F:63:79:69:AD:62:6A:CC:8F:63:72:1D:81:74:45:82"}}},"request":{"raw":"GET /me HTTP/1.1\r\nHost: api.ipwho.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proposals-usualx.org/\r\nOrigin: https://proposals-usualx.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 17 Aug 2025 01:52:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T16:48:22.474837Z","times_seen":543451,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":300,"dns":1,"connect":142,"send":0,"wait":143,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T01:52:25.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 1900021\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1900021,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (60279)","md5":"abef46cc2c2042bc8ff53c2b74cd8bb1","sha1":"35ccac12291d6b1bccdded965161667b66681f09","sha256":"a076746fad13fa8fa8428854135c5fee3e48db536932988a4a56247aec6ecd17","sha512":"ef3cec24130e921650e52d3c544d6c6a8fd722c3dfc1d68a795d906cf1092c31a74759b9918d3dfc4a7bb940bf334f74a866156b3c6f0ba46705f7a3934e9c37","ssdeep":"24576:5Xy93pAdM7KsZ63c+lkQ4hfg+Z0d4Vj1kskB13:26dM7W3c+qv+du183","tlshash":"c725d0679a16113f3c1380f9d3ddaa5c9129e083ed21aad9badd2041cfc27f619b7709","first_seen":"2025-08-15T04:02:28.960422Z","last_seen":"2025-08-17T01:52:56.976662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":65,"dns":22,"connect":17,"send":0,"wait":33,"receive":239,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-starkware.f4d256f9.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-starkware.f4d256f9.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 3095\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 221 x 41, 8-bit/color RGBA, non-interlaced","md5":"a6b5ff659334dbaf999a1d880af3d68c","sha1":"094b681ff610602cb248196d654fbbf5fb5b6023","sha256":"d7037b91b598c89642500608274e19264268b690eecfb5c2fc4f940b5ad209d0","sha512":"6ee8e7c7df57840c81d9d61923ec4ac11cbdb47b6f44a61ea920045f6114be2a475f372c832a055f61f8a72df89e7e5e14df5bbbb8404d22bf471c2b4d8dae99","ssdeep":"","tlshash":"a7513c5263189262a08007ad041f2664cd3317ba11067b94f4f4be39041ff1af0f7db6","first_seen":"2025-08-15T04:02:28.952397Z","last_seen":"2026-02-18T13:33:24.03703Z","times_seen":6,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/bg-gated-onboarding-pattern-desktop.d8018329.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/bg-gated-onboarding-pattern-desktop.d8018329.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 212212\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1840, 8-bit/color RGBA, non-interlaced","md5":"0ac319d8b186c744ca03bc3ebf149af6","sha1":"f45266939e5eaa7d0eaf6abaafbf5696e2cd5ffd","sha256":"ed446e8b2ac02e7ddd2ea96c102e02acdd23aaf99f6ebd9ac25ae427cfd8763f","sha512":"73e0ef3d70af0da1c1135f9b292f219f2649e70d48d9262a2227d80a9912a08a2555eb585765b1bdcde5574ff847907b9c22c0a1ae546003da81b2c2a5da8c2a","ssdeep":"3072:3ih1X0MKRZMwglrpdYFtfVnpFJYt4ZCbs734GNIxxjdeQLTtiJAi0a7tlZm:3ih1Xv2MwGjYFttn3+4ZC4bd7tfm","tlshash":"c024f1599995c850c281417c917b2be0b6305efaea9b9fc785a7b3774ec2bd4d00e0ce","first_seen":"2025-08-15T04:02:28.955224Z","last_seen":"2026-02-18T13:33:24.032679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-amber.5ad4362e.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-amber.5ad4362e.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 1943\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 37, 8-bit/color RGBA, non-interlaced","md5":"1a19d3f3c0ac4df3a97b1edea54938d7","sha1":"300c0b5cc3658118ff890bcaa35ace1163e28c58","sha256":"2054963ac69d7e9d75a07c2780fac3952071fa27c33a7abe370e3be52201daf0","sha512":"4aa0b1c5a2f139e6e8e0c01aadf0ceee12ecb16bc4c93e00ab311301e8d4f299e6dde152efef3be4aa078f396312a2426c8d658923bc19c34bbe64710e8e1bed","ssdeep":"","tlshash":"70413b4bad5d8536c773ca28a18e51a276b0390f354f02581603b6079a8bf07b02f346","first_seen":"2025-08-15T04:02:28.965461Z","last_seen":"2026-02-18T13:33:24.037559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":179,"dns":21,"connect":21,"send":0,"wait":19,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/fpbundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:26.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 45503\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Aug 2025 14:59:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-gsr.54ebbb50.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-gsr.54ebbb50.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2992\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 37, 8-bit/color RGBA, non-interlaced","md5":"e82174a05f794c76d5161fb47812774e","sha1":"b560fd79b07ed97b5258a2bb3116d8ad9bc2680d","sha256":"a1b25b15b6ee6ebbe7b2faa8d6cf0ac794b035740de91523848944c6152668df","sha512":"59eb70c442dbbe40e8749fba66ae89639d489582e7cc2d4fcf548bf809a43df959215e6b01ea1f0d640373820821fb0ba23449d7696eae5be32c6ba33a5bc670","ssdeep":"","tlshash":"d2516d8b303a98db62d16a588aff8046e5302c0c3d99f2967846f7d581d3256e0ebbc1","first_seen":"2025-08-15T04:02:28.953349Z","last_seen":"2026-02-18T13:33:24.03813Z","times_seen":6,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":177,"dns":1,"connect":21,"send":0,"wait":17,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-kraken.9bab6c7c.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-kraken.9bab6c7c.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 1657\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 47, 8-bit colormap, non-interlaced","md5":"05048795c00575b58b8a9640a6bc1514","sha1":"fdc9ae5b9ad67e1b98ad4f058d9073e5ffef5d93","sha256":"6ea864c1a4b65df62c56084597e735d203622cf89aab1d01a729f3427d4d3077","sha512":"b0c4b0fcaf346e9c1b87f45db6bf17ae1df616b3e966feb46fa4033d9913bd5f9c6a124372d9eb8b7991d65c60fec9285e21863ec74137e99e62d1dbb96951d8","ssdeep":"","tlshash":"fd310a53f1263e8c5b33cb521562087a083fac5056125d310c9438ac8b31be48326695","first_seen":"2025-08-15T04:02:28.964594Z","last_seen":"2026-02-18T13:33:24.033293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":187,"dns":16,"connect":21,"send":0,"wait":18,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:26.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 155070\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 Aug 2025 01:52:26 GMT\r\nage: 1001700\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/bundle.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:26.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2510372\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Aug 2025 14:59:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-10T23:25:47.366161Z","times_seen":671,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/modals.js","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:26.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 52833\r\nConnection: keep-alive\r\nLast-Modified: Mon, 11 Aug 2025 14:59:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1001699\r\ndate: Sun, 17 Aug 2025 01:52:25 GMT\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 155070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":132,"dns":1,"connect":30,"send":0,"wait":27,"receive":61,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/apple-touch-icon.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/apple-touch-icon.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 18011\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"35c07cace0507bc3411d4aa47e2c82c8","sha1":"47954406ec09cd35c4033af02b34f72471861219","sha256":"1538be28396cba85080931fbd8bd5b128528ec1d2994e1818f6bd56ca7f50a3a","sha512":"a4316bfbc64519195edf8de706ef97519b13b7213a781b0a3f85335c95d34fb739149c3c955da02882fcb4dce67bd394c9b7ceb3340d66d061cc37a5a0fad631","ssdeep":"384:RtpiOT3dn9zb5r6tpnZ5aFJ/AvosgWfA6F5sh1A0:RtkMd9z5WanAvoZWI6shz","tlshash":"0a82d0d7919ebcc08f61828d239a7db8b199dc9b6453c854bc337f89137a6d7261181c","first_seen":"2025-08-15T04:02:28.954181Z","last_seen":"2026-02-18T13:33:24.039189Z","times_seen":6,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-morpho.aec9bc5f.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-morpho.aec9bc5f.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2908\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 41, 8-bit/color RGBA, non-interlaced","md5":"31ad3506c34990812edc3a131ec388c0","sha1":"1b49651f615b19d83dbeeb62d1fc49af336ff783","sha256":"96b30c72ea6733f9788aec99e941d30c201fa7b9522a51d5777ffdac0a3599fb","sha512":"200f6e9007a55499ab4242e4c46e6535a537c9532693d47b87632bf06f014d7a63eccf1705c98d9c1fc234e1b272b797ff1d0d69ead0e6f2753dcf8d3db05042","ssdeep":"","tlshash":"835129e2e4257d90ce310810a02d1249baa30d659f3a53fb0ff5d9338922b45a4ce70b","first_seen":"2025-08-15T04:02:28.957801Z","last_seen":"2026-02-18T13:33:24.041558Z","times_seen":6,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-axelar.e59d074c.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-axelar.e59d074c.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2325\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 37, 8-bit/color RGBA, non-interlaced","md5":"923ef708b96f3adaf1ddcb8669f8dd39","sha1":"345860a77ea12c06946e3f3a2c5bf570c7d18d0d","sha256":"be4f92b9af342129427c3769a9d06d4306d98813042e8fb58f58b27802b9f75a","sha512":"954e6af436bd078e6186cd194b41e28ca2bc661e022272f385c33021139fd1a24e177a5b58139a2b7aa668c0bdb6f6d92f13f260c798ad167239a6fa6cc3e747","ssdeep":"","tlshash":"c9411b3912128ae688a48534091a15ceabfd904f195b9d7ea502bfc1471235819aebdb","first_seen":"2025-08-15T04:02:28.950352Z","last_seen":"2026-02-18T13:33:24.036534Z","times_seen":6,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-curve.a64bcfa2.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-curve.a64bcfa2.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 4350\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 157 x 49, 8-bit/color RGBA, non-interlaced","md5":"71b355dd686a07b8704a4d367c344360","sha1":"5944ac7c5f34b7b7a83537f816a6788c65d02bce","sha256":"747499a5742857d198a6bdaf10c57971188c1310debd890791c39cac88b3ae56","sha512":"af8e81b474b0035d1b8bd89e20192b461564dd685ecabbf7d380b9c8914ed4337e1e7388fbd2fb178c3f63eee84fcb5396a765c279a4cfa0fe85875aef8ec00c","ssdeep":"96:gao9KhtnxXVMOC0Bc0UZAqY1cmghxDTMrw4kmjQEiT87:lxq7AjgnDTMTEEiTc","tlshash":"d8917d90d9d2e6dfd124a67439bb52d0daa884dfc50700489d98f24bb4a630e78d2e94","first_seen":"2025-08-15T04:02:28.958737Z","last_seen":"2026-02-18T13:33:24.042092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:27.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://proposals-usualx.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 1900021\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T16:51:04.15564Z","times_seen":17507359,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/ondo.0d5ce323.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/ondo.0d5ce323.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 22948\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"007d2a697499ce56753ad0980e7db1f3","sha1":"eb18e68d5b6560afab0b68f1f0643534191a04c5","sha256":"bac9af39efc0e35304dd36ac83df7bf534dd0a962e1353a8db46c7967845f206","sha512":"88ac50f499229193b88699739b61094f28427ccec87e64d3f1074a8b63d33872f5c806547f5a642c5fe8ae51bf61bf70423b5ef2b0d3cb3b8fc1d8748fe2f14e","ssdeep":"384:LRCFl6m6rGLjV4rklLfgWszL3CdpNgMn6go9TwK+z+MiDltYeEx1+:4b6m6Wj6rmrgn3Cdp/6P9i6YeEC","tlshash":"b2a2d0cc08fa3139fd985d348cebd6d53a9e81a0423a4863d8c82d25c1d5bf985b6745","first_seen":"2025-08-15T04:02:28.96376Z","last_seen":"2026-02-18T13:33:24.035328Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/maker.f54c59c8.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/maker.f54c59c8.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 4103\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 164, 8-bit/color RGB, non-interlaced","md5":"561236811525477f8f83736d95bee9fb","sha1":"7dbd7f97437677080d428472c3128d942b227afa","sha256":"604735fd03981c174b5490e055416880204ba9a8dbd5c34957a9eb3927883625","sha512":"4cd906b4690bc2fc42f20ef7976f099abeef8608dea94dae409e3700c8c447ad5b4e5624839e81fac8cede88c75a9ec3bd9327a8d0c6d8e7a0183166265af958","ssdeep":"96:LnLJOt8EWWWWWWRjnn2fp0CFeKWIjeJFI66FI/5oIcAlAvA:LN6WWWWWWZnW0C8No8I66FI6M","tlshash":"2a81d6a5a30820ef61c1bb7473deb695ce337588ceecb40d3769245518a882556bb28e","first_seen":"2025-08-15T04:02:28.951285Z","last_seen":"2026-02-18T13:33:24.043956Z","times_seen":6,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-usualx.org/imgs/logo-iosg.8adc29f9.png","fqdn":"proposals-usualx.org","domain":"proposals-usualx.org","tld":"org"},"ip":{"addr":"213.111.154.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proposals-usualx.org/","date":"2025-08-17T01:52:25.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-usualx.org","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 16:41:23 GMT","end":"Thu, 13 Nov 2025 16:41:22 GMT"},"fingerprint":{"sha1":"79:5E:44:EC:40:5A:61:5F:60:15:2E:73:82:4E:62:11:CB:82:81:0B","sha256":"89:F3:DD:57:55:53:EC:B4:32:CD:22:A5:A7:62:DC:94:48:BA:FD:E3:F5:66:0A:82:22:A2:02:1E:C5:68:F3:FA"}}},"request":{"raw":"GET /imgs/logo-iosg.8adc29f9.png HTTP/1.1\r\nHost: proposals-usualx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-usualx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 17 Aug 2025 01:52:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 1814\r\nConnection: keep-alive\r\nLast-Modified: Wed, 02 Jul 2025 16:11:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 59, 8-bit/color RGBA, non-interlaced","md5":"c4c684d848deccabc91164e6713136e7","sha1":"0d582cab5997659e5882ec532f6777553cda6495","sha256":"8bc0ecd67ecec33aab813f049f387cf4eff4e507713f7fefa37d5f7fa87bea6e","sha512":"7307792f0d3b61174f5caab2bec697595fa2b95e34b03339fcb1aedee736331f139f12e8d2e33c6a64d0c513978d412e996503abad4f5efc799975ec652e9dc9","ssdeep":"","tlshash":"a13129dc90a86eaae49623bc6b9c2be1b2b49446445938fc2132fc1c110b31682953cc","first_seen":"2025-08-15T04:02:28.949405Z","last_seen":"2026-02-18T13:33:24.034786Z","times_seen":6,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-17","alert":"Sinkholed","trigger":"proposals-usualx.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}