{"report_id":"daac60da-bcca-40b8-b709-7806246812de","version":0,"status":"done","tags":[],"date":"2026-09-27T14:50:33Z","url":{"schema":"http","addr":"zstamps-proposals.xyz/","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"104.21.30.230","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zstamps-proposals.xyz/","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"title":"Zcash Shielded Assets — burn it, keep the receipt","dom":{"size":137841,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50421)","md5":"707d50e4abe494b65ec48d1be1e3797c","sha1":"24e510f7488f8c7d5640e478af3258d62c4f0d31","sha256":"15d045e4047a46e2ac416be68ec2d9cc3aa3e32d914e4b47c13a208bed6271f1","sha512":"999808b9929aadee93cdf6f4ad6ae08129757212590ed4dfdd22076913a085c62e4a1191e177f23d313960c91bb7cbb08b451ab90cde9d4cbaf8fded6d9bde25","ssdeep":"1536:RtfUrS1pF/RPhQsP88x8Gv0rpOkixFWIVK7PSZIDwqT9zRJlsc0hsncXCxKPEj2H:2T09","tlshash":"3bd396e0c7a993fd9ea55a8c42d0699160f1542f7fbdc0f9ceab81f26c518e049b0c9d","dom_hash":"domhash2e5caaf8ff133d29b111f79a1f49e6bc","first_seen":"2026-09-27T14:50:38.129772Z","last_seen":"2026-09-27T14:50:38.129772Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zstamps-proposals.xyz/","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"104.21.30.230","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T14:50:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zstamps-proposals.xyz","ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-22","domain_rank":0,"first_seen":"2026-09-27T14:50:34.536646Z","last_seen":"2026-09-27T14:50:34.536646Z","alert_count":14,"request_count":14,"received_data":964492,"sent_data":7214,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zstamps-proposals.xyz/","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"568ce1b56d93b656a9cf0589921ac458","sha1":"9270d7a198139c605a575fec7e48a309210d50de","sha256":"85c77574c22963da6389b0a6ea11bb31d24549ce67a9a1487a3ce784aad719d0","sha512":"4079d87dae3e00d09ca26a6db8c88e2cc744021e1f36fecbc11fbd4266cfff404609067e110d9f41561c1c2ef82056b8cdae6afba6aebc054d552edb9a4ed4c6","ssdeep":"","tlshash":"a1c0c08048f28de0080c08c7113912c4705038bc80f37081c5fccd0b8c0fd552acc218","size":181,"data":"","first_seen":"2026-09-22T20:44:54.706615Z","last_seen":"2026-09-29T05:02:52.728638Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/js/app.js","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"206116dcca1fab866ed156b6a8fd1893","sha1":"5c7d2ef81596706dda3f5e84257c0d8f3cf11ae1","sha256":"3e1dae2a5dc57849861d3c5f91f93fbab535df886b7982e6e5a77ed14c01a1e3","sha512":"6b98030a2b91280c36cdc92e7331d20f2c9ab144d350429e1042c6643d09187177c49c6e2b8a946fd9305da9a9ecc38d0a23abadb67860ee64f616903e8c3301","ssdeep":"192:OTdv/hyO9I8Sl1usKXXmCOhlpEEuL2VDGPEp:OxvgO9I4Xm9lSEue","tlshash":"9602a4693472023106f750ee73cfb585ba961007fa40e995fe9c85482fe4d90caf7ada","size":8773,"data":"","first_seen":"2026-09-22T20:44:54.705136Z","last_seen":"2026-09-27T15:04:09.879153Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790520601803","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8401e3f8f482b7d5d4a65367f2dc757","sha1":"2f2fb12955557082d8a9fedb2b03c76b2a1409ce","sha256":"57eecccd669cb7b92c6f4f472fb0e78b9be58dd736d596b4ab2cb0c80bdbd8d9","sha512":"dd8d3971c93bc751a39272cd6f53f63f9f2708fd296c320dd007cf8e65c45e0ba1d3d6468ae896b6c9cab9156dc0fb7cb7a38711cd11610bdd68aa2777b2b6a8","ssdeep":"6144:ch5gD65Frq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csutq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d1d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645597,"data":"","first_seen":"2026-09-27T14:50:38.133764Z","last_seen":"2026-09-27T14:50:38.133764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zstamps-proposals.xyz/","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:50:01.316Z","timestamp":1790520601316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 07:17:32 GMT\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTCpI9mXQ9vY1NVQ%2F8yzxNeTqi%2FPATruyNSfBAMC3yaIZmKPhsndn2J4fqx1Dv4%2FKRKxh3KhX3mby%2Bfa2fpx9GBsRqpXks4qakMwmkCJNzjZjIMrkrLGpDLLina8ckSXhCSx3IZi%2FHs%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\ndate: Sun, 27 Sep 2026 14:50:01 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a41b517f0a651ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137032,"size_decoded":40706,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50421), with CRLF line terminators","md5":"9a13e1bcdd4c2c698eece25990347c40","sha1":"e72095231e500a7fe9c72c651eb63ad63a65f2b1","sha256":"761799c9dfe4579d4557aa0f4cd7191a2c8d33f6fdc932eb3029f00dc4873b47","sha512":"e20242db75664676a2b8d01abf95e9678d690d86f5808f8408b66b42e12c5d20c70c0a269c7428aedbcb2a8827b8d4974dc1500265f1dc751b20372e37bda9f2","ssdeep":"1536:XgfUrS1pF/RPhQsP88x8Gv0rpOkixFWIVK7s6ZIDwqT9zRJlsc0hsncXL72zeZSu:YwWc","tlshash":"25d397e0c7a997fd9ea54a8c41d16991a0e0542f7fbdc0f9ceabc1f26c518e049b0c9d","first_seen":"2026-09-22T20:44:54.702963Z","last_seen":"2026-09-27T15:04:09.88611Z","times_seen":4,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":102,"connect":21,"send":0,"wait":175,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/css/styles.css","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:01.826Z","timestamp":1790520601826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\netag: \"ac3a-65bf2f215eb80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sun, 27 Sep 2026 14:50:01 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YasN22y9uSC5LPY0iD6zjczBaOD5rnhR1ZhafWPgMiWaAVHu3sJSMrOzsY7Apj2MpQx5PbF91yVbUJ80ffoTOXi3TX57kCjkxT5PL1VOUB2WgSS0HMnJAY2%2BlRnB4jLbKT5hF%2FPHmOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a41b51816a801ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44090,"size_decoded":9145,"mime_type":"text/css","magic":"ASCII text, with very long lines (44023)","md5":"205ed308da60d7f08df3527d79b64fc8","sha1":"fafadf6e578331d22caad3edb257a728dc20bf70","sha256":"f730c1df4c90ec7f9866c1e0d92c0ba19a26f090362a8395b6534858f83f67a9","sha512":"11a8a645408733a18fe2f2753989df39028ec8eeb1e13d556b90c4af4ac986a03aae31e1836c16ead3234af4ddb224c02e4f51395162e2ef54a6327301db9f38","ssdeep":"768:OEdzqZPAB9B6ICnFAQoBZ3CaUaz4lO+yoLw6gj60yV9tQotqoYYoMDYDUca4aen2:xzqZPAB9B6gz4lO+0ybyH4dDYDUca4ar","tlshash":"3e13f835b229b43ae9774d7332deac4c5a08a026ab2161d7f5083b404fdbbf75b45728","first_seen":"2026-09-22T20:44:54.696121Z","last_seen":"2026-09-27T15:04:09.8782Z","times_seen":4,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/css/interactions.css","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:01.828Z","timestamp":1790520601828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /css/interactions.css HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 07:15:56 GMT\r\netag: \"b7e-65bf90568c300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sun, 27 Sep 2026 14:50:01 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqJgIik5LBGiFmrraT9CBlcj2z6tfHD9vcYBkNhHIpEiTJ19Wk3HPRdzxTNBLyl%2FB5sk0VMBvCySFOoBetYcfGe00vbq%2FhkleqFvN%2FK0uYOfrA8A64trwVjr%2FMTsCosoN14ntora4Yo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a41b51816a811ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2942,"size_decoded":1924,"mime_type":"text/css","magic":"ASCII text","md5":"1731981761508cd0559f102505850f12","sha1":"d1030969c305f63d2c9cd3dbd811fe17a3b93abf","sha256":"50bb0b38c4fb79e1e129829992d3b2001dd5244962f943e6f204333aa86d3172","sha512":"8f1e9362678698d79cc2e0b43ecadc34d739c4f10c6eef0b8666bfa28717a714f289760f7bd93a77c9101a99f5beefc0fdf11a967495134240b26033016448f2","ssdeep":"","tlshash":"a9516102f700a265e527a5bb3397bb193335961399118bbc6fc8225dc6cd2f544e2794","first_seen":"2026-09-22T20:44:54.69734Z","last_seen":"2026-09-27T15:04:09.886885Z","times_seen":4,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790520601803","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:01.830Z","timestamp":1790520601830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790520601803 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJa8%2FPhdairRVK5izkQRXtKNvP5MH1aurpJztAjCNRb9vbwqF72EkAjYZxzTlmDjzFPIc%2BPg0T0DCkSV975HVGI1A1vx1W6bWM4lLW4VECZEzYMb%2FAhn2%2B7J578B%2FvA9F%2FpAnvg2FtQ%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41b51817a831ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645597,"size_decoded":124424,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8401e3f8f482b7d5d4a65367f2dc757","sha1":"2f2fb12955557082d8a9fedb2b03c76b2a1409ce","sha256":"57eecccd669cb7b92c6f4f472fb0e78b9be58dd736d596b4ab2cb0c80bdbd8d9","sha512":"dd8d3971c93bc751a39272cd6f53f63f9f2708fd296c320dd007cf8e65c45e0ba1d3d6468ae896b6c9cab9156dc0fb7cb7a38711cd11610bdd68aa2777b2b6a8","ssdeep":"6144:ch5gD65Frq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csutq9NWCEiox3Ti/ESVPHSyyA","tlshash":"d1d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-09-27T14:50:38.133764Z","last_seen":"2026-09-27T14:50:38.133764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/libre-franklin-latin-400-normal-DNAyL8lK.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.011Z","timestamp":1790520602011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/libre-franklin-latin-400-normal-DNAyL8lK.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"3e1c-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwse%2BDrmsYIhMix0kCfqYQMGcAVV%2Bj5%2FmPq%2FsFnNAnKOtwSnCaC%2FuqLMNrY39KVP7JI5aJO297AMLqXcCRPCyRzYN7tMjz9Ep78lISXaS7nT%2B%2FXO9DibJL%2Byk2lV6zxOf46U2iMFTu4%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b51829a921ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15900,"size_decoded":16601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15900, version 1.0","md5":"6b939122bafb1bed9fc96496d66f6a20","sha1":"99a2074fba51f1f4fc1833c8fd5294775971a785","sha256":"50a24a85106ad722ab9d1353977c1f7b3b3d18465a807c0d6f1551b57a705f41","sha512":"003f069604e5ee58477de065fee9b8643c6dfb4359b6a6be9d4cb41d3f6d24b046db47b46d3158b59d56625c3d660d66963b1e3d901fa62a295a9067605a425d","ssdeep":"384:o9kTzco6ztafzfESOzJzIL0JXV5L0wjA2K+vSpU4104:o9PYfEtJl5L7jA2K/UA","tlshash":"f362cf75a2400e9d9d0112238e43ebd9e890c99ec7f07dab6cfd30a8a80d34bdd41a34","first_seen":"2024-11-04T17:48:34.758897Z","last_seen":"2026-10-11T12:36:31.16391Z","times_seen":437,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/libre-franklin-latin-600-normal-BBKMvfE-.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.041Z","timestamp":1790520602041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/libre-franklin-latin-600-normal-BBKMvfE-.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"3e6c-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqvpPxifKzmVb0UUlOmfBfxOMp593ovCWsf6lDUfiedUvL40gbxDiYDmVq1A%2BayZJ1Jr%2BQmAMFAebBcfziP4efK%2BQCRFm8KlwT0kzUQbpc1MS1MzJNw4Eg2Be%2BPPYbtcamFor3O%2FFF0%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b5182ca981ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15980,"size_decoded":16675,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15980, version 1.0","md5":"6c5ae80149aeb87c0ab1ad5ca792f93d","sha1":"18d95bbd2040ef13db0400bb13262be2ce3e9199","sha256":"aaa877781157fd03a54d6b0f27283e5b153a6d1b44a20c2d80c695f5e07d242b","sha512":"944b0c5d8c06f1f02f7f10cc8d17f0f495a919aeddd960507c3bf4960b456b463affbd2e774d2aed42bd0ed65fc3ad6c0df63e789fada09f54fba0b2f8095f9a","ssdeep":"384:ywBMgf4AVxqn7+b6PsXxj7ZpPrOtiMLjnuw5bTA4rE48dZTyOK/:ybzAV8niMixj7KsMHuKTA40dFyn/","tlshash":"3b72d05f0232f8c6c8554a718bf15edcb980ba7544e20d81d9e6dfc793e843b7868658","first_seen":"2025-06-18T19:27:03.468859Z","last_seen":"2026-10-12T00:41:14.384383Z","times_seen":175,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/bodoni-moda-latin-600-normal-DbXDFeqY.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.042Z","timestamp":1790520602042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/bodoni-moda-latin-600-normal-DbXDFeqY.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"3a68-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yv6INXzAcnZ7sD%2B%2BbyXY%2FX3PEW%2F6Y0%2BYrWej2mjJu4dlLYK99672pVsabwXJk8dbvLliQe1CHBbJIl%2F8FBb4THHgORnF8CQCr73fqXrsvxAk%2FJRskO29riZ3%2BsZWvJMTI6hTG0Umv5Q%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b5182ca991ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14952,"size_decoded":15653,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14952, version 1.0","md5":"5fac8efe058cbfc415855722fc52e7cd","sha1":"5825d57791a183cbec8af7e58d42657efc38e041","sha256":"a4975772d313f22af5758888ce83dad5001e9a3afb9cf8bde805ad1c5caeaacc","sha512":"9ae2e714301c6256d143294a84958310c8892b773c6612fa22bc88e55fb8afbb10c11e99361b8005f40c7fee4adba94f22d691950ea4f01fcebece212c4835de","ssdeep":"384:gIy9UYS8NDb3XGeDyrYBbcdRTQ7xehOu1OAxtZfoOXknuc:x8NeeDyr2cnTuNu3bfoOXknD","tlshash":"0262cf5a2e52df3af21f7070700d44b915d2e9abcde0228a4713ad72c9717fed122967","first_seen":"2025-06-26T03:07:03.194988Z","last_seen":"2026-10-04T14:38:13.655168Z","times_seen":17,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/bodoni-moda-latin-400-italic-DB-bun8K.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.044Z","timestamp":1790520602044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/bodoni-moda-latin-400-italic-DB-bun8K.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"40a8-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BiyjzdekHBN164FomO1JvJNDvCtNR0CC0tWbEoSWR%2Fma5WV%2BBSpiKMOaSzBt12tcTcGvoar6TNsmFWWjkHvV7ed%2F1AMjIft0BNRlL0lCxrqij6dhlB9WiRaxc1P5jje7355bsHcMxw%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b5182ca9a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16552,"size_decoded":17245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16552, version 1.0","md5":"0bdf505672ab5027150a4a6abd25404a","sha1":"30acae0beb638ec9c12d7d2c42426d8f21248269","sha256":"783fd966b8ebb26034e892767b877c475d375d9227f5f5476d05ad5529d18232","sha512":"b894f1e4be724c4934f9f183e1a6b1795695e1f75565e7185821623714cf0ceadb06d0af6e1f332b0dbaedf0186b3e349f2c7bdec128c5c0d51e84b6c9d45002","ssdeep":"384:08Y6LRAIBxZQGVD1INVNw2OCRiUqo1mf9S6se3l4nPC4Hr0q:08BVfxPx1wVuPXo8xse3lqL0q","tlshash":"e372d05d0fdcd36b49157c328fafb0b49768616d1c8eeb3000903aca0b17e6ed6ca055","first_seen":"2025-06-24T21:55:57.348865Z","last_seen":"2026-10-07T22:19:41.370666Z","times_seen":64,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/js/app.js","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:01.829Z","timestamp":1790520601829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 07:18:00 GMT\r\netag: \"2245-65bf90cccda00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sun, 27 Sep 2026 14:50:01 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHW%2BFD6qIxE6Vv3UFDCNvklJfEu9fVCxKV2dzojxqFI%2FdRFdQ3fsSagKlBUdIjfXPJiQeV9igAS71GAPGclSnyj0A1q2ZbzAbgDaTcYRngOp5FfZBUOjlvRr8VjIlhGJYgtxTUDbmq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a41b51816a821ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8773,"size_decoded":3858,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430)","md5":"206116dcca1fab866ed156b6a8fd1893","sha1":"5c7d2ef81596706dda3f5e84257c0d8f3cf11ae1","sha256":"3e1dae2a5dc57849861d3c5f91f93fbab535df886b7982e6e5a77ed14c01a1e3","sha512":"6b98030a2b91280c36cdc92e7331d20f2c9ab144d350429e1042c6643d09187177c49c6e2b8a946fd9305da9a9ecc38d0a23abadb67860ee64f616903e8c3301","ssdeep":"192:OTdv/hyO9I8Sl1usKXXmCOhlpEEuL2VDGPEp:OxvgO9I4Xm9lSEue","tlshash":"9602a4693472023106f750ee73cfb585ba961007fa40e995fe9c85482fe4d90caf7ada","first_seen":"2026-09-22T20:44:54.705136Z","last_seen":"2026-09-27T15:04:09.879153Z","times_seen":4,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/bodoni-moda-latin-400-normal-CIWtV3SY.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.012Z","timestamp":1790520602012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/bodoni-moda-latin-400-normal-CIWtV3SY.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"38c0-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgN0eM7HDJDqotkniBYK7vnmDTHtA5jdlpx9E3yWy7sdlymrcZ94lqmyZPfeRhsxAg7LxntnH3xyO6D14e2zTQGAtkp4NcN2kvYjvNHcfr2MAhMYfv78%2BlbeGiebdthFZq29wW6DASU%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b51829a931ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14528,"size_decoded":15215,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14528, version 1.0","md5":"6693a7a70a636bf38a815e5fa66fe11a","sha1":"90f019c976408e5492eed64947c8a12f2ad0915b","sha256":"e2863d3bbe2e094f1ce98053ee3c6200cfa35f82b9f4cc6fd95fbaead4125d4f","sha512":"8b9341bf592448a786e0b57f19a2a3d04eda2849feb9a331eb4f2b8b647b8213adc9c989622b94bddc26aecd80ed6df4bab7fad6e07d0bd8fb015a8a75f3e383","ssdeep":"384:LSKsLred5YTAskbDmKQie9njxbmSTPE7eSnr/QUyx8waw:LMi5YTgaiYjxbFIeaUx8waw","tlshash":"c862e1236060486dee83d00e6245554f4ce028f663fd23cd41bb786c55c78e48bafed8","first_seen":"2025-06-19T07:45:41.315531Z","last_seen":"2026-10-11T08:28:02.393535Z","times_seen":166,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/courier-prime-latin-400-normal-BbyBr73r.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.014Z","timestamp":1790520602014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/courier-prime-latin-400-normal-BbyBr73r.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"48d0-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zC%2BW0xjtXNh98PiSahYPG5YGwswqGjhgXA7kXbUgvZroP3v5WHf1sxieKi1ayAXEk6c7XmFC2kTSHws%2Fdu6UvSJJmiCCu9SRu8ecgqw3Ic7RhbWnWf9sStfI3q2%2FGFSSQVBfQg3dR98%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b51829a941ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18640,"size_decoded":19331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"3e919e4831dbd88e7740c67aa1d071e4","sha1":"c5de710dacfadc8297918f7023f5a2e78121465f","sha256":"f09844e1f4fe9e67df2cc77474519e68756d559b4648278b9dd4f03c8ac9c31f","sha512":"b4950fb409d3da002ebe3cec000854ce2f6e6a31f1a1a3b64df5fe54c0ed8477f31773157b5cda9ecabd5e6bcc061f3f98a44a8f0459809108d85132bc15cacf","ssdeep":"384:cmalQ5TjbLj0e/xSx5cOtcn7mjxp9HiYa0RPDH/5aKAC7:cJOjtIDi7UHT/RPDH/EKL7","tlshash":"1d82e0580799260ff1b02634a6b94174f08bfda2a6466efc3b38f65b10f7c8458b4a1c","first_seen":"2025-06-09T00:57:14.808892Z","last_seen":"2026-10-12T01:32:06.674701Z","times_seen":929,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/fonts/courier-prime-latin-700-normal-D1YCjmaD.woff2","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.046Z","timestamp":1790520602046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /fonts/courier-prime-latin-700-normal-D1YCjmaD.woff2 HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 21 Sep 2026 00:01:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"4b94-65bf2f215eb80-gzip\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8H0Tzrk3vrJLg0T6inoE%2FfU2HdSYraTpQVxIu0tx3Pa8e9fwC7rJOujH7Px6A0CvLNGgDWnE4JsSLsVAG4spB0lfqoZKt4cDCO9k%2Fcr2s0bQZlkg88odwZ%2BrXu6MqJcsJYeMpuR958%3D\"}]}\r\ncontent-type: font/woff2\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a41b5182ca9b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19348,"size_decoded":20039,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19348, version 1.0","md5":"3313e74393da3f4d9b0c6667cae65f97","sha1":"ce1bcc36aee6c6a73936796ac0772a830b7085c0","sha256":"5c7ae1cc9aae183453565c836b74a1b988f5f2e52b65098decb909b3930957ec","sha512":"c1a03c9510feacd6a7e3da8c34364a63ae38051d020ff68fb18a89b4552995a6379a8b1272a38f93064c4f282421349d127d6fa552aa21cd64fe88d2f2a911de","ssdeep":"384:wqwyycmU5TRLpFqlrV/NjdDhfWU9SXx/WBUnSz/He525SB6U:wdZILpclPdDOXlWBUSM25CL","tlshash":"2f92e1d2ec7e7d5b258491fba2c72789ac33442732eacf38b5d1790068b674a14b8425","first_seen":"2025-06-09T00:57:14.795547Z","last_seen":"2026-10-12T01:32:06.697895Z","times_seen":636,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/favicon.ico","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.302Z","timestamp":1790520602302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zstamps-proposals.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sun, 27 Sep 2026 14:50:02 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZCOpPmsQQQKt6DWmzN5q24aT3a7Y%2BdZvDlF%2BO3wmhHdOghdrvryXH0aZhFQ78z4GzErfKPzFQiwwJ7WAptHAKK3fz7%2Fnuj2mA67uZHSXFQRHMQ3ddk7GMzB59ZtAOoEb30of%2F%2Bs%2BIw%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=6,i=?0\r\ncf-ray: a41b51846abe1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":853,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"0c5544a31d76f032b8739dc80fd83942","sha1":"4e7ca0a97ce50491d183ee0fbd120adba6fe9f1a","sha256":"f7c7704ddb5c9a4e2215d0e57411d290c52af7e5427a41bee6664afd16124335","sha512":"9d00382be7b489121c4a8a08e5c0aa117ada4a2422588f39a48df06c014f09d7516ec0a2b57907dbe8cd4bb6d39a2af21c5f689d0e42ab49b945653e4e3b1abc","ssdeep":"","tlshash":"e3d02bdda043239b0811145039c111c3278813f6747a81e86d86e487535853edc89689","first_seen":"2026-09-27T14:50:38.13954Z","last_seen":"2026-09-27T15:04:09.889603Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zstamps-proposals.xyz/5jFvaVi1.php?s=%2Fjmpd%2F","fqdn":"zstamps-proposals.xyz","domain":"zstamps-proposals.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zstamps-proposals.xyz/","date":"2026-09-27T14:50:02.869Z","timestamp":1790520602869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zstamps-proposals.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 23:04:10 GMT","end":"Mon, 21 Dec 2026 23:04:09 GMT"},"fingerprint":{"sha1":"84:00:03:C2:AF:32:1A:13:8C:D9:9E:03:42:3E:47:42:C3:AC:32:CA","sha256":"45:1A:B2:93:3B:1C:CD:AF:06:71:92:09:C5:5C:CC:EB:6C:25:D2:81:0E:B6:AD:35:24:09:AD:4E:9D:C9:69:A3"}}},"request":{"raw":"POST /5jFvaVi1.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: zstamps-proposals.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zstamps-proposals.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1286\r\nOrigin: https://zstamps-proposals.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1286,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB9gLqAhIADAAaAxEDGwDYAiYAAQACQAMAAO8nhn2XtsKCAW607X0kGhYcolGCi48CAABH1h6oioZs7tCkqpXoROSIhm22rSDA5MqwDInavCTlC0hBU0v0obMVzkLs1L8_j5x-Gc6Xfruqxjj0BRIoBmnpmyjKWtUiy6npGEBX-kDBoE1gTsG2uCQVx9CgosaJouq9N0pOfJffnDvM5Ye2lQIfPBu1iOGQICihdE9ngsuiDF2162jJeCrYeNd2Dru33-izVfWH8shsrSRhD0DK02el-f_TV0GexFDHtQIiSZoox-jeOx-xArbo9Me7bUXtvYu383BD1NQugvjJMkvKXB8oaC3M12rJO0-EEHNer8LecRRn5BvfcL8nUAXixv-iGDSdhyYkz3-uEjoiFicPL40WGSPyrLHcY-qnBKgCQAvq0aCokQgjk00n6fF6RmlE-CGBYOeiEulqNkU_mraPOeW4BmwBaDBJymryt5KB9kKKh5UomwIa0fHwGdMsLwJdBoz6VAA4E56JiQtGhqXvf_7r9cKvK4GvywbFVBqcQb2X6uRX8DWH6sD-zKqq0KUuYxiKfbT2r3vw72dFAzpovp7x9JoKGQnuvcNvCQUfsP8aJLs1ouwY4ny_TZR-qA2dh719xZHZnExk4UB4WoroJoMZ0PPo4PJZ5ByE5KJAF11D-aroksma0YudDp2LnKb0hHEnO2cty555hbBdFAuVYkLEVPY2R4sd5PlGH7giIIY6Fy3kGoF9wgh8jRtNXspuiTgNGow-gaKCZ6XkD2reampTA65Qegqwl7M7rRJ-V_yUIGnW6_p2DhAoH9LxTlOlfZO3mR3RZgUQEcgMBM8mADc8PiVk1Bb-JqiTP7V3iYyy6yiEOZjKjVOElHX0IKEBCk8ZEDrXkLh2JJc64_5sUSEtLRFcic2I0Pg_LjaPnTqO68LuoyWEFG7p4wLgPDFNneyD_XnUB5CNJHIrC7BgX4-5HzuDbSyxdKRdkV8cZbWI8wC_UB7lWnXs-JiEp1Ijz16zDXYVOvoPTDiQHrdsSwvsoZJk-vNHR0WQlk_Z0EvYeY1w2C08BrVhlHp4tz34xfgAHnzEkcnONqYOKM-aA-bztiE_4W9XznNuEZ-02yoHQXyqTeRC8encv0eCFqhaDIPoCzzJHsBa_aI5kx3_eO_UOnz7GFU5AWsc8aq9rteD1mDZWPy3sPsQ\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ndate: Sun, 27 Sep 2026 14:50:03 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4mWVqbNVwpXOn4SeTyXusHa1K%2BeCj%2BQXxQs0VEosRQ6yq4NEZi1sSXkD1mTYqTGd8qN1heg%2B9BWRNT9zVS6%2Fz9XpGh79GGqh2hGKAkxxUWMgBWqUSWwYZsW3laU8JcEkOkU2GRh504%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41b5187eb1e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2530,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T06:31:03.111188Z","times_seen":19048103,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zstamps-proposals.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}