{"report_id":"e21c7fc1-6c8a-4019-8d4e-49b7531b245e","version":0,"status":"done","tags":[],"date":"2026-08-18T20:12:46Z","url":{"schema":"https","addr":"proposals-firelight.info/","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":0,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4edbbb76e66e7a473cd29ef2ce242e05","sha1":"1f3667a8c219001cccf0d9710b62befcaa976a7d","sha256":"c75da89a23b462445e9d19868aaca08f43b02f23df3684139fa488c0d2acd5a9","sha512":"fbdeecca4b7b429dc8703ae49be655a0e5fee5091e2039d060500364e73fa81ef787bec826e900ebdb74a0f5551128a84574c3d91d50347554d8441f077f176c","ssdeep":"96:DJFs1Bx13gb61j1l0D7gx10UFZV4jl22D+i8kDNLeOl:H61rpvmULV4jM2D+z0sI","tlshash":"b19151a544f1663b18a386a9e9d07f47af81b607ce8d29407baf00e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"2026-08-18T20:12:49.883981Z","last_seen":"2026-08-18T20:12:49.883981Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"proposals-firelight.info/","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":0,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T20:12:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"proposals-firelight.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"proposals-firelight.info","ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-18T19:42:56.213611Z","last_seen":"2026-08-18T19:42:56.213612Z","alert_count":12,"request_count":4,"received_data":9400038,"sent_data":1889,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proposals-firelight.info/assets/magic-hook-space.js","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc0be4c9016f66bf1209077c37963e9","sha1":"bcaf00b67e1ff7b51cc889abfc91a7f4923df63e","sha256":"f508270c606df119176cd2bde13b76894eaac5d64b004d8f4e72348a1b52ac29","sha512":"2aca4360bae1a8b0c864105a29fb4f0054687acd89432f3bd1eccf16d8e5bdbbb94ef2ca0fc7a4eefed60750043dc70b01850367065061394a6dea906d34b585","ssdeep":"6144:/SakCRl+exqbTdI0p0IFJYTg596PbmFsjpd:culNITdz0IFJYICVd","tlshash":"79f4a5a55f5f4dbc872adb6c4006a653513d4719d3377e2ca06ba306eca3c6a68cc7c8","size":754182,"data":"","first_seen":"2026-08-11T10:54:24.639291Z","last_seen":"2026-08-18T20:12:49.887383Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proposals-firelight.info/","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-08-18T20:16:25.174192Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj112 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.25562395086599676] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj113 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.787083941852e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj114 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj176 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj177 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj178 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj179 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj180 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj181 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj182 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj183 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj184 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj185 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj186 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj248 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj249 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj250 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj251 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj252 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj253 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj254 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj255 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj256 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj257 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj258 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj320 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj321 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj322 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj323 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj324 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj325 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj326 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj327 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj328 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj329 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj330 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj331 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.25562395086599676] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj332 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.787083941852e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj333 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj395 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj396 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj397 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj398 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj399 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj400 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj401 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj402 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj403 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj404 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj405 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"warn","text":"cap wasmload failed (1701ms):NetworkError when attempting to fetch resource.","filename":"https://pinky-goat.digital/S91jnmXitxaUptVX3ARB7.js","line_number":20,"column_number":67916}]},"http":[{"url":{"schema":"https","addr":"proposals-firelight.info/bpY5h09KFT.js","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-firelight.info/","date":"2026-08-18T20:12:17.087Z","timestamp":1787083937087,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-firelight.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 07:39:35 GMT","end":"Mon, 09 Nov 2026 07:39:34 GMT"},"fingerprint":{"sha1":"4A:C1:85:E2:4A:17:DE:EF:83:CD:89:5E:04:B5:3B:6C:92:A9:F0:4E","sha256":"B2:15:FE:83:E2:40:7F:9E:21:08:1A:92:A3:2F:09:33:3D:DC:97:63:0B:47:5A:CD:FA:D5:DD:97:1D:6A:06:50"}}},"request":{"raw":"GET /bpY5h09KFT.js HTTP/1.1\r\nHost: proposals-firelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-firelight.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.4\r\nDate: Tue, 18 Aug 2026 20:12:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 287\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287,"size_decoded":462,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d58badf903f2629b0bb2afe6ea2e03b6","sha1":"69bc38dcd528ba20202da3c5827795d43b620a6c","sha256":"e0ab51e3546b6cf09d5a8a1e3ff7f732d5fdae4e61b2b064fb278ff7b8dd4e9f","sha512":"34c565d12049d4a33b641b39119b56825cacff971528ddf952610e6cd1d77321087cbaa073a8fa6d48f0c570c12aa41bf8eccd454381dadc510ff0da39989010","ssdeep":"","tlshash":"38d0eb9fa0836383081110a038c214c3278c63f6b43e82e83cc2e08b13e813ecdcae88","first_seen":"2026-08-18T19:25:26.52966Z","last_seen":"2026-08-18T20:12:49.886426Z","times_seen":5,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"proposals-firelight.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-firelight.info/assets/magic-hook-space.js","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proposals-firelight.info/","date":"2026-08-18T20:12:17.113Z","timestamp":1787083937113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-firelight.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 07:39:35 GMT","end":"Mon, 09 Nov 2026 07:39:34 GMT"},"fingerprint":{"sha1":"4A:C1:85:E2:4A:17:DE:EF:83:CD:89:5E:04:B5:3B:6C:92:A9:F0:4E","sha256":"B2:15:FE:83:E2:40:7F:9E:21:08:1A:92:A3:2F:09:33:3D:DC:97:63:0B:47:5A:CD:FA:D5:DD:97:1D:6A:06:50"}}},"request":{"raw":"GET /assets/magic-hook-space.js HTTP/1.1\r\nHost: proposals-firelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proposals-firelight.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 18 Aug 2026 20:12:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 29 Jul 2026 05:35:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a699136-b82c6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":754374,"size_decoded":235414,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27939), with no line terminators","md5":"5cc0be4c9016f66bf1209077c37963e9","sha1":"bcaf00b67e1ff7b51cc889abfc91a7f4923df63e","sha256":"f508270c606df119176cd2bde13b76894eaac5d64b004d8f4e72348a1b52ac29","sha512":"2aca4360bae1a8b0c864105a29fb4f0054687acd89432f3bd1eccf16d8e5bdbbb94ef2ca0fc7a4eefed60750043dc70b01850367065061394a6dea906d34b585","ssdeep":"6144:/SakCRl+exqbTdI0p0IFJYTg596PbmFsjpd:culNITdz0IFJYICVd","tlshash":"79f4a5a55f5f4dbc872adb6c4006a653513d4719d3377e2ca06ba306eca3c6a68cc7c8","first_seen":"2026-08-11T10:54:24.639291Z","last_seen":"2026-08-18T20:12:49.887383Z","times_seen":5,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":46,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"proposals-firelight.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-firelight.info/assets/util_bbef9c1c15.php?req=ping","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://proposals-firelight.info/","date":"2026-08-18T20:12:22.881Z","timestamp":1787083942881,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-firelight.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 07:39:35 GMT","end":"Mon, 09 Nov 2026 07:39:34 GMT"},"fingerprint":{"sha1":"4A:C1:85:E2:4A:17:DE:EF:83:CD:89:5E:04:B5:3B:6C:92:A9:F0:4E","sha256":"B2:15:FE:83:E2:40:7F:9E:21:08:1A:92:A3:2F:09:33:3D:DC:97:63:0B:47:5A:CD:FA:D5:DD:97:1D:6A:06:50"}}},"request":{"raw":"GET /assets/util_bbef9c1c15.php?req=ping HTTP/1.1\r\nHost: proposals-firelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://proposals-firelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T21:44:59.888227Z","times_seen":17961971,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"proposals-firelight.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proposals-firelight.info/","fqdn":"proposals-firelight.info","domain":"proposals-firelight.info","tld":"info"},"ip":{"addr":"196.251.107.176","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T20:12:16.705Z","timestamp":1787083936705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proposals-firelight.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 07:39:35 GMT","end":"Mon, 09 Nov 2026 07:39:34 GMT"},"fingerprint":{"sha1":"4A:C1:85:E2:4A:17:DE:EF:83:CD:89:5E:04:B5:3B:6C:92:A9:F0:4E","sha256":"B2:15:FE:83:E2:40:7F:9E:21:08:1A:92:A3:2F:09:33:3D:DC:97:63:0B:47:5A:CD:FA:D5:DD:97:1D:6A:06:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proposals-firelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Tue, 18 Aug 2026 20:12:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 10 Aug 2026 19:41:40 GMT\r\nETag: \"83e7fb-658b68b064500-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":8644603,"size_decoded":6170293,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27843)","md5":"f51dd3fc59f8e3948c9a6283c838741e","sha1":"341c9c23869621909af32a7bf85cc3659cd212f7","sha256":"9639382ed1d2c5591500714f3c67031e049207fc32ba8db36f189e87062c0577","sha512":"f5bd5ffa06b5d91204ae02072a96b806eea499eca7d89d59a026df93373b94d5e5dbf38dfc71aa3d1ca7e8ee4708cf75ff94d5dd271b92f8dfa13d96218b937c","ssdeep":"24576:HZqZm86lV4pl4IclWXmN4s54HQagOZneeh:5EzwifFqWXmyL7fDh","tlshash":"4d250271500244272da368d3728e3e755e1e2577910093ba67fe2684ecdbd3623b27be","first_seen":"2026-06-09T13:35:08.278573Z","last_seen":"2026-08-18T20:12:49.888849Z","times_seen":28,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":11,"connect":29,"send":0,"wait":62,"receive":314,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"proposals-firelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"proposals-firelight.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}