{"report_id":"018266b1-cea3-4a76-bb0b-50feb01d489a","version":6,"status":"done","tags":[],"date":"2026-02-24T13:58:09Z","url":{"schema":"http","addr":"bonus.blockdog.fun","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"title":"Become a Part Of BlockDAG Network | Buy BDAG Coins \u0026 Miners","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bonus.blockdog.fun","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T13:58:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"bonus.blockdog.fun","ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-02-24T13:58:14.935014Z","last_seen":"2026-02-24T13:58:14.935015Z","alert_count":51,"request_count":51,"received_data":9686265,"sent_data":23197,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-24T09:03:46.059177Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-24T09:03:46.033705Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/zoom-2.2.7.min.js","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc942e7188d1ffa35ba420209ae7f7b1","sha1":"7ae97a485cd4d49143f972228864b81005411c6b","sha256":"b60caed9c7bd1d2e3f5dc767d5d322af0ee6852c6f439a7f8315c815f281ab64","sha512":"179be5aca4511439297c2ac81a9c5e2f9574846fdb5c1c3a381e7a2e41ed40d9a976be154ee443ff255b95176865b205dcbf20d8df5411aaccfd0495e15be024","ssdeep":"768:jdMcEcNSeFGElQay75NWoZprO4Nv0HD2lcilS66RcleL4cbMT9KGvz/vdXGc7Rrk:YecE4QCpxv0H64NxlN","tlshash":"145372d81606d4da8e5218eee8b3e009e0645e53cd6cf267967dedc0b56df22c08727b","size":66640,"data":"","first_seen":"2026-02-16T13:46:23.130966Z","last_seen":"2026-03-18T11:31:40.690317Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/c4675162-2c1e-48dc-89e9-acdd01782f9b","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1943a7bbee8b4d092c184c71fa1a058f","sha1":"e0409ce0de6d09c47005d1c21b42557bb748ebb0","sha256":"d47e0bd4bcd4fe64ebd32960cf7770270399e35536534b4962fe918b8d17d3a4","sha512":"bd84eb79364f60469036b94595ddbf501c05d3061fddf2a7ee4ffb5189295c4a8220135115f1ed615d0a3bc2d992bd0f26028862411e0a108b3c46ccff3475c5","ssdeep":"49152:rQGkwdNZngkO5OFdwW2QUSvhjG+EyY4bfO3xrQanJfCpszVttY:j","tlshash":"27f523c2ad1758b68f58079550eb6d0b98890d1258dca1eef659f8c238fff9080fb91d","size":3390411,"data":"","first_seen":"2026-02-24T08:32:31.736499Z","last_seen":"2026-02-24T13:59:16.525496Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-24T09:03:46.0353Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98ff820ba9051d1e17688e8809dc7ced","sha1":"43578a081ec33d97a98020fb87d45ceb4455262e","sha256":"4b78ca661406fa831afaf2f33fd9e3734c8a8a3b38c644b9830c48c7fce4add1","sha512":"76811fe923298f79fd802d2c37668e3abe510bf8ba0afa537b0ff3d81014820b1707b54ad6261b50d79599867884ed73bfb1bfcfea6fbcaf32a7e91cab2ddd1d","ssdeep":"","tlshash":"2fd012597074a97a148e797e4ccf08ce7e269412a2084dc999dcd8547fb1e6d42e488c","size":196,"data":"","first_seen":"2025-05-14T10:30:21.264279Z","last_seen":"2026-06-09T00:29:57.046508Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c46e1ced45bcb65d56e64b321394c82","sha1":"0a631f94960c2bebd445ffbdc05dc1feecd9dee2","sha256":"13a48ed830e2e04268292bbc8ef46323936b86b2fb6ccf8790657968ce2ead72","sha512":"981d0ba047dbd39460279fe449bb9df07925fcac43c9454f2664dd10e83f1d8405497f249f96f004889114732c7dfc7e3d0724c45ac5c88493ad90bd4620e411","ssdeep":"49152:mYGkwdNZngkO5OFnwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtJT:Z","tlshash":"40f52382ad1758b68f58079560ab5d0b99980d2258dce1dff659f8c238fff8080fb91d","size":3388117,"data":"","first_seen":"2026-02-24T08:32:31.747764Z","last_seen":"2026-02-24T13:59:16.532933Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-24T09:03:46.042517Z","times_seen":3281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-24T09:03:46.031867Z","times_seen":3224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-24T09:14:20.575614Z","times_seen":3223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-24T09:03:46.041277Z","times_seen":3326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bonus.blockdog.fun/bdag.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /bdag.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517282\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-542fe2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4U%2BKHUe9MGJUqq8y2mmeE0jPSiZ3lt7bFkc3LK%2BtFcCmJhcCDDvernw0w1f10mZwA7TAjB631OphPvJL%2FLwov%2F%2FBWrCPEvjIDm7gcSwChOQAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79522a1707e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5517282,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 481","md5":"6021cee3cde78f3b2f2ed7589dfbb54c","sha1":"f19863859aa1676033403f6f575e18915f000574","sha256":"04e8bd7c4c089d1b27cc222f590a77f275de504d84fe0cfb5dea759a450d04b4","sha512":"b3376503e50e0431ab45bfcea98a7fd6e553d990f08222cfff0372f42f2e6841c1f558d98fdc723ab5ac799a7f4054600d4244b422c0e9544f013740c7ab27fc","ssdeep":"24576:Y9kWE09ubhjVIOWdKiFfhxeekxeh215gIB0:Y9LBu9jVILe5401B0","tlshash":"8525332f4b239587b187243c7942ed85443c28ba3f298bbba6d043526def9ed80d7561","first_seen":"2026-02-16T13:46:23.154604Z","last_seen":"2026-06-21T01:46:01.921931Z","times_seen":57,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":626,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/usdttrc20.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /usdttrc20.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-7d2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfd3vzLsbRaFrp1pZCCJQUEDfVsV7OjSWc0bTie7MNvQzm5SigIXKV319mzDCaM3b6XdTFsVM%2Fm%2FiRCAaLrqT%2FbANhzs%2FPm5T2qpKhtL9Q%2B8KQ%3D%3D\"}]}\r\ncf-ray: 9d2f79523a1f07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef1534c37f54df61a5c7ee5f78d94094","sha1":"907b04a2cec5838f0d819d66e3f1bb0a7f08b696","sha256":"bc6654eb0672bca955fc64e403350d69a459e6001d2f82c742074fa532a52360","sha512":"4212be40282404e1b857289d3faa3b8b68f4d5ac044363891d76e527a59b05e8489aadda612edb26c1055d9645e84083afb23d0b0cb7e552b53dc196e4341c82","ssdeep":"","tlshash":"ef41cefbb3c871e8d401d3b8412a80b671ab38f976676f4043e49b95e71619a558d848","first_seen":"2025-06-19T20:11:15.778597Z","last_seen":"2026-06-21T01:46:01.92772Z","times_seen":65,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/usdtbsc.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /usdtbsc.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-6e3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW9TuhYDIHWZ84Pcz6QjMgIzqNkGWaHeRfaLNWECi7Np%2FCobUcuAugXggYL4TXzko7SaTHFXAzqxSPV8%2BRrB8rkcouMf9cx6or5%2B%2BmtyTNXNAw%3D%3D\"}]}\r\ncf-ray: 9d2f79523a2007e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfe8a941a7014c275759ef81a105b46c","sha1":"c8e38603f86edc0a102f24162c6c43269ea46be5","sha256":"e4e152b06b6af73862137d8bc3a222f1b7b6c37f1f6c6f021cdf06fe27daca78","sha512":"518e33025394f4ba3d16e9156771c40119307eece0c8bd488336fcca435ed61b01e7756b895b247956096f4e302478e6105d61ef9db8bfb9efb66b7c19911e0a","ssdeep":"","tlshash":"0d3161d1a31d22b9e140eb7c87136438383704eb7901d0de8ef10a6ae04c09e0c6b9eb","first_seen":"2025-06-19T20:11:15.772563Z","last_seen":"2026-06-21T01:46:01.942078Z","times_seen":60,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/kas.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /kas.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-570\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpFeQt6OtVMTSXud65iKCaL1W8wxERx5C4OALf9SQDJapnvpO2gcSDND9Sez411FOc6BKZ9Rn1huwIkSay4iTPTJTeJBRZjifoitWuNAYQrDAw%3D%3D\"}]}\r\ncf-ray: 9d2f79523a2207e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3860ad07d109d648eabb425bde1f6ddc","sha1":"abcabaaba4b39fc8bd940e62df280cda4cc4d7a3","sha256":"2c79f1167e3f642ec31165701b94a090ce13d626d5c1f76c71fd9018d5c69e08","sha512":"7b759c6b8a973646c857267a2b5291ef50daf26b799ea5629ecf8d1304559d310d55ab57afb7f1fe15044b821dfdad25f4444ea83a6e7c50d24841ca9523e7ff","ssdeep":"","tlshash":"b021207c933650bce24d07988af105082b6ae4ab23900678bdee94b26f25ca45165f74","first_seen":"2025-06-19T20:11:15.832193Z","last_seen":"2026-06-21T01:46:01.956948Z","times_seen":67,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/shib.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /shib.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-2fb7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7MZoThStAZiQQJ5I7st6We7HPG2Iz%2FadyMsPyd3D8wjPAqPvECKMlpuYd3uvPm%2BvUxKG1NKPH3QcP3EIidx6y33firvYJRlb5hMJIYsfAJy4Q%3D%3D\"}]}\r\ncf-ray: 9d2f79523a2407e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a22645ee1822f19e9cef05ef9af74927","sha1":"e45c55f9646b7cec9ff20c01f36e74b7c111250b","sha256":"5a834047bdb47d95d7d30ba8322410703ef55c649249a8b4a797f8ae02a4f85b","sha512":"0bfd197b7026df5322e7675a46fadae0d39475cb129be5f20052ffc67c3c8251a17404ed6a8706f9a8d8a1651140f55b140bbcfb4be3af4e87fcfb7f064da7d0","ssdeep":"192:sGOKImimkNawvz2l87RFVLVejVqSqgNWusgxjVHbcyjLSdN38I7qccz1:sTljhXvz2lG1Uj8SqggusWjZoy3Sdt8D","tlshash":"28422ee7e7c8b1e4b403e3a49422947475ab38fe7b26cf854340efd4b712199888ec94","first_seen":"2024-08-22T17:20:24.030635Z","last_seen":"2026-06-21T01:46:01.917347Z","times_seen":62,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/a537cda361603d01.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /a537cda361603d01.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-1092b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buJvc0xZXM2gv2%2B%2FLodt%2FcEUCu6pbydEadeOV6qTcM7u9QrDh%2BwD7uXV4NtQ44QiMeBV7kGWnDvxXULX16RpP9ftNFwuamJn0l7eCvbgsTNTEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e194607e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67883,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dcc6e57d55160ed93e497c73c5fedb89","sha1":"7aca60b4a7ffe158ed8cb143485f332c4ca56a1f","sha256":"3a3c554f48f716b2e7e230d0f7299d78077df3d7d3d5261c9db7304b19625307","sha512":"4b3c9b1703f3555989f4f58134bb65395535eae55a91a044d1e64918c319db119670978ed71c09c4a3af0dcc8d1c99b1ac2786c5e1cdb6bc92f2b6b865cbdd1d","ssdeep":"768:1dA5IQOmW8XRDzcq7hSN1ZcZ115JttpXuhILqlGx1GBiodM1Xr5v9/8zeQPwUdLh:1dA5IQO0XRDzpSN1Qx1YxJ","tlshash":"f9634474412c686ef897b0926ecdfa5e513dac214f5146e0ed6a083a45c23f639b07fe","first_seen":"2026-02-16T13:46:23.129613Z","last_seen":"2026-06-21T01:46:01.923242Z","times_seen":55,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/check.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /check.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 95\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-5f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCPa3Gd9RJmkR2G4JmEYhwl2AAWw7zg9E4LsqHjCoKHjr%2F%2FFfdG2snS25t1BzihmCGSNrhtDfp3AoUXiqhX4nZzSTLQieDpZxhnRJ%2BSVqcM8Ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e295907e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 1-bit colormap, non-interlaced","md5":"71a50dbba44c78128b221b7df7bb51f1","sha1":"0ec63b140374ba704a58fa0c743cb357683313dd","sha256":"3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517","sha512":"6ad523f5b65487369d305613366b9f68dcdeee225291766e3b25faf45439ca069f614030c08ca54c714fdbf7a944fac489b1515a8bf9e0d3191e1bcbbfe6a9df","ssdeep":"","tlshash":"fdb012e323704c36d1014173523c92138b22c31ca14d19438001fc280c63305ccc879a","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-07-24T09:17:49.716016Z","times_seen":21987,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-10.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-10.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5t14V8fbIxMSNc7JaCpoETDx%2BjAmkxJJKGxJZNDMozK16%2FtyPQPM4luz7EJGLcow1WtriKOvvHf9KV9vYXy%2BipabvL20bQ%2F%2B37IeZi4csuD4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e295a07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/6ca6224f9376cc31-s.p.woff2","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /6ca6224f9376cc31-s.p.woff2 HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45388\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-b14c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRSLwyarb21TNnfuB1FKdsUitGeb%2BbT3sEfIfalAJ81LsuK8LEXWKS8JGLdcUN%2Fp59iEoVLU57iSSrkdrQ3sx%2F%2FcfX9KbX6rjn5GD2QhNEvqMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f795189fa07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"2106084f5b102e873ea725173ca8d8d7","sha1":"e4392b8344edc97744d12f9b2e6009f47fa2f19f","sha256":"8b44488a5ebc1871afc2de2427fceb60f8a5be75fbdc7e666b3386fdb0e280e0","sha512":"198f36a883ae293f7f2c97bf0f9ba84ea3c1628e98933d191deb9e358bcd2b18b82176a07d4f56882e72315aee14f5757bb0d522d555e45d9242d41f0a1b80bb","ssdeep":"768:QVvZ9kCZGF/pSpg+0EhCH5wZolZ+curQgOK1V+MvTTGL1Lq:GvZ9jGF/9ch45wClNudsMv/GA","tlshash":"ca13f12ba138a894e1e17d7776a999211da143e3f35e364f0b74f3806aadd284d19c34","first_seen":"2025-02-26T13:37:41.74679Z","last_seen":"2026-07-18T16:06:57.570714Z","times_seen":133,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/13971731025ec697-s.p.woff2","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDvC0E8cfug99aNdoIBse3%2BPFLszOrMvLEufyJKWvAhsC77jJV8t0L8gecxVmS38TN7EWjB1u0M3OeKwJ7aAWubFxyaBFR1%2BIg53btixQ0mkbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f795199fe07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-24T08:53:26.745679Z","times_seen":6051,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/notification.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /notification.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-32d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JD%2FbpcjoaIuhI1G4nVNxti25GR%2BRtxi9NbqyxRSUgNbAv0ugEoOxVTMEcvvGbsSnPsvSXHusyHsW2UK6UqH6EpgKW2sijWPklRKGhwZQHwsPEw%3D%3D\"}]}\r\ncf-ray: 9d2f79522a1907e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fac897b16e75a11180c14e60434de931","sha1":"3156bd743d51feb67c0d884708279b0fd3175285","sha256":"b5c19ee1a738edba6aef7ce8047eee25ad1aa8b4672428a607f66d9ad991d3f2","sha512":"8c8acf042d2f98658f13ae5c84c6713a8bb78ba8ddab5ffadd52778d4af0956fadbe2e57f5dd5edcd6981367cffd1a8a1abb382fbc6e916e8df3673d7b4ac0a4","ssdeep":"","tlshash":"1d01bdfaa2844988a21f6f90e55b76e424f734fad99899d4c0009b62eb9140ec85e9d4","first_seen":"2025-06-19T20:11:15.790867Z","last_seen":"2026-06-21T01:46:01.925005Z","times_seen":59,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/verified.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /verified.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 13601\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-3521\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZB4gdg%2F8%2BHcvO%2BX%2FWx%2Fgh6bxFejelcSdQPEG2tcB7HYJnkLZ0iuGJKQ6Pjpx9hGBfKCGrRf8y4VETKfjuVVg7bPizhJi4iop7ez4CemlpIvO4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79524a2807e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e78cfcbaf6ca3f2ab16284671ccf2d02","sha1":"d8824c694e6f13b16649ed258ede5f6ddc12cc5b","sha256":"10f6203b108de79b8cb1f91ace623d6eb360dc2c3f3d9ff8e1ce19d0f2293aae","sha512":"d4fa92b430cc3d6197c250b9712ce54c7029b7f653361ef653673f879d5be64cc1c5c8fa174d89c1fbd4333fbf3fae4fb34d22f448db1f3eab4ae3a9332d878b","ssdeep":"384:NdTAZOA6SRtEdkJAid/+ApaPHBJZsZzC0HCwNqDjcpz:/TZSukGw7aPdCzjNqXcpz","tlshash":"d552c03bed625ec7f67cb5339c5625c4a8ec0f8887220dde745a7446b023d255ac48ea","first_seen":"2024-04-15T06:32:58Z","last_seen":"2026-06-24T19:11:13.059099Z","times_seen":94,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/icon.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:46.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGkiW%2BmGXu1%2BxeLwNSC%2FL7%2FVaup7Yv3NVh%2FI62%2FY%2BslCKOSW76VEsx0yMlWmf8eHPPbz1QBEQrNVkLMeyJec6gJpAoX5xc1nTJ1v00D%2FLc7DAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d2f79555adb07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/7090b15a35459fb7.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /7090b15a35459fb7.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-1726\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSQeXJEW02AZqZllOH2KqcjYYlYwiTYpsngTENezCHz9CGPxla784zFbNBHp2J1PA6jU7uFPE4CU6ymZV1U5CI9iYvXJuhgF5c8zTAYP3fn74Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e194707e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5926), with no line terminators","md5":"4947a37aa6ce89d3f26a7896af57f94b","sha1":"bf07d0b9be5cc7c0ba96e9a3815a35c9b87f62ae","sha256":"1a1365a2642a503bbd5e6f11ac4c1e6608816b6656b11925499281d84aad8923","sha512":"818aa5a6505457bbe5c37cd425fb3fdc7da8f510d352c2835b4987977b7538b8caec22afeb133aca06f215050ac7349746f1c599a102581676fce477dc89abf5","ssdeep":"48:BLYbHPtzqVwipFUhuPXHUPgvPA6EdZYYTY/6NUxEMQUnVX/2WNCXPT1EGGC8PFMR:BaV+Vw9kP0Ivj3NnCZZiaYZXFmFoX4","tlshash":"33c1efa9022da42ddc5760a19e4ea25c616cb0096b07dfccbd36731f1ce52b31de857d","first_seen":"2026-02-16T13:46:23.152029Z","last_seen":"2026-06-21T01:46:01.944373Z","times_seen":56,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-6.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-6.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mje7uQZ%2BI0MUf7daEGPCPwy5w2gibYskMRhUDLRvTJl9wWp7bDUGKeUzhKUlh2Bqq2LIkyKLjUG9pbCU6tsO3kHre62ZjkU66hu8Mq9WizpaOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e396407e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-8.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-8.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W03IDe8tDZhwcV%2BF%2B8bLzxwRgc%2FLQPcgPAhzQXW6OMdLUVxfTwvIdrUtfgujKaKot%2BZIQ%2FM5mYPDBVvmoqwkU6ereRNhJz3QS955X2ntsRLioA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e496607e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/favicon.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gNRB57AC4aXrhfGgSES8ofspLTf0omY%2BYBVDTjcBHUG1AIU8ob0R%2BLdUUkf6HHMEnqkZT1lTOEc0uaXaWOPzk18A6ssnTOIuF2P8p9Wk68HbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79522a1807e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/doge.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /doge.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-2ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciWdfH44N81gc7TIK%2Biur6nZlrrUjAsXp8WvaQPQyhdCT8Ns%2F5WIAw8mzQBBEwZlCCWMp6q3%2BJa60iN2j2b1RzkMvF8fvAEVG%2Fz9XXuxO4pajg%3D%3D\"}]}\r\ncf-ray: 9d2f79523a2307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"988a386635492284051de264a0594acf","sha1":"8fae3473ae4daa811c217b311641c08a8f9ea295","sha256":"668f8460ea5932a26dc2ab7897e17d75ad1c5adafdd4e620abdb183c6c304b88","sha512":"fc827aa3d72ba28424de08adc58c6eb6c17117975ea900b0273ca02fd5f8ddb4438b02ecf2137312e854b733c2865a6a327a688efd70a6e19f75a48e9c952a96","ssdeep":"","tlshash":"5a0170e394ccc1649706e3ae5a2b783a345735f47b36c956c1c03317acb541f988da41","first_seen":"2024-08-22T17:20:24.008063Z","last_seen":"2026-06-21T01:46:01.948762Z","times_seen":62,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/secureproxy?e=jscdn/getFile","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:46.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonus.blockdog.fun/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bonus.blockdog.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"1vhrqkst874rdhog7eeq\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8fcsD1vv4A7EcFCCXeHpehk%2FHoSPFF3wkhx8aJndaPSaz1cShFrGIvzdz72RLs7J%2FnRZX5sAWulZmLQ9%2BJQaUm%2BbrwLQHI8kugCZVyV%2BmSvfg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f7952aa4a07e7-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3390411,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a712301bb77a300cd3a82889dee0cc54","sha1":"9c0044bbd4afff257b59f3a1746fe16a960e761b","sha256":"9d76f62ac3ce0c194c4c1e2b8542f45a0e58c77512b2cf8031f9ef687ddddce9","sha512":"e9f4667f2411a26b4ea91013dab3e8ae53ca25531f30b1c8e72a84008e3541d768c1e5ffba33754d7c0ca62f4b1924d3dd6838dd003f8160332607d35d49b693","ssdeep":"24576:ryb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RKNFY:rQGkwdNZngkO5OFY","tlshash":"732523e3af5b58288b6c0edd50ef1d0e2d444d111085eafefaa6d40736e9b7040ebd69","first_seen":"2026-02-24T08:32:31.7314Z","last_seen":"2026-02-24T13:59:16.4994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/icon.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:46.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfOCiqmIPZp975JfD8IlBtjEN9CW8PAhNHdqPzixBHitF8OXZ6LU1YgzkkPnQqkcpDBFWhoGrqgGTFfYG3Dsks1F5%2BNqrXTVlsbEqKD9UrTjLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d2f79552ab307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMAQK2BqLz5m8FnY3zgCn4zKh6UZ%2BUTB%2ByYiE2jV%2F7O2aKyNspm%2FMD%2FfNgRyMRu2Kp80VAb%2BNRYZTxrhU9f4HZ2EJh2o7J%2BXSojELNH8Iimk%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e295707e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/27b13e18a048bf0d.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /27b13e18a048bf0d.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-f796\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ya9WhnvM5vxgCHNoauO98Qw42TdnRO8bHQ2XaRDLhmXk48vIYNhSBSIS8d588EjsnBl3VSdUutNLIybLv2MwLc24bfkrVcVFes43UNCu506MCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e194f07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63382,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63382), with no line terminators","md5":"9dd559e0a046f13c7983c68dc6edf199","sha1":"1142e75a5f4548b2c0c653f2c1eaf98f43add0b9","sha256":"d73b8083ba1973c36a706c479323bd132eef5c09130fdb7a8674992290303e0a","sha512":"a62d47f8c83b48cdf219205cc36d4f28be30432887badd341fd96af016482c338d709e3b241951e6b8e68754310ed047c753bffb50811bf91204b8be84dbb023","ssdeep":"1536:q5/Ca/2+j78huyPhg4XGZqOV6ZLiOftUJ:q5//9","tlshash":"1f5385f612f9ea3de91be4455b8cd94c4425b4008f6b5ae4a833537a40c63f23eb61bd","first_seen":"2026-02-16T13:46:23.138414Z","last_seen":"2026-06-21T01:46:01.945654Z","times_seen":55,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-4.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-4.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djd9hta9Y9bg2uAnbAk3fWssSMz1qa7epIt9lYFC8A6JHbR%2B0DCM8WG7LPsuQKIARRFhklsLwvt2RD8HWN8ReenggegSgGW6dPKXh4TsvX0q0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e395f07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/498ba6c5cfb89aaf.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /498ba6c5cfb89aaf.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-924\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvoTZBtAXUIVZfpqn%2Bqvn%2B06ocqOKPghxYocWn1zq4PMS%2Bug%2FpyDesSqj7lkyxjZF%2Bk%2FlTCGxZmb%2FRiNmu2WN4JZcedYXUEzgcCcxIS1bszVew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2340), with no line terminators","md5":"8c3478299f7f09066cc5ef5890e7de25","sha1":"6b464934cd7493724929e2ed1547deb7c7c6e244","sha256":"d6d0d7eed6f8657cc8c1d8080b9be06c7df5129b82e108679aeb4d7b4325d543","sha512":"70402dfc0c1cbb18f22a8d7ce09c67c9a39b48c60869ac55187cd2db021eb736b563e59b8645be505d0e05dc6c74e63f072bee5efcbaecd8f9a6b28ae03f78ac","ssdeep":"","tlshash":"874157750d3e6979f49fe60e5d68e08d1154b83cd50f19b07c8a772a04c22b30aa2eaf","first_seen":"2026-02-16T13:46:23.152903Z","last_seen":"2026-06-21T01:46:01.928972Z","times_seen":56,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/fc4740aaf7ec08ec.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /fc4740aaf7ec08ec.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-123a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJFXAGwLcupNki9l%2F7qnk8EA2tz%2FBIVZCKE62onz3bkblPlv6t6tlPoSovuukRdgjFMkADKlgVsxyND8IEpkANcfzBfEJOEUgRbDwz3btG7fNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295407e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4666), with no line terminators","md5":"ab1069311ca1e5dfd0ad9692ba2847f7","sha1":"2e28518ad9ac308bb9e91668267acdeb05dc901c","sha256":"d10bcb644b5ba6fb8bd7ebff5660298021a79c3c85c6ad21f468981a1e2dc4c4","sha512":"586bfbffad86b06b8c1fef333236ddf4246f8edffcbb05a4af26805d5a9be1cdd2fd32b8596e86c6e26716ad1ac0c70543e88d02dfc149ec695f1ea81490a481","ssdeep":"96:x2mK8Xt8I8VH8l8v8W8+858f8d8paTZUwcD/Nf5Rx6q5qxqh:NxUlDUch","tlshash":"23a159f603be5f28f82755546bdd818d3a44d800ab0e65e2deb390b5518b1bf38e913a","first_seen":"2026-02-16T13:46:23.153715Z","last_seen":"2026-06-21T01:46:01.947486Z","times_seen":55,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-7.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-7.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81uInfkr7yMcSaawMJrl0qhLbdGUk4qeXbWD8Bq3IkjJxHuoe67bVP%2BcUg6pFU8bHdpQTVYzA71fQ%2BEgAHQ0L7eJmdT5dP7xzOOM9e9Kaf%2FZkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e396307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/extra.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /extra.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-18f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vfGs5dKTtdGRmIk7LweWW%2FqUMetEcBp1mZfbfuGQebE7IAiXMtUWamE%2BIBhiqMm5u0Fw1nE6Ch%2B4IwhyxShvfPSV3%2BTrGpz8yXhkwehBbTugA%3D%3D\"}]}\r\ncf-ray: 9d2f79524a2507e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e48a280bdcf2f90a1e7348d479e231ae","sha1":"c37e1f15a5410e44336d6fc7088d88e63703582f","sha256":"3384e9c72abbdf2990be49e9909ff16db11d163f9698343ca5b169fdf6c81e1c","sha512":"4882316870e6575719718801ed83daba58c0296ca7ff46f9ba6e3aeb5680410225a44c94bd09440e9b5446d4feb3db5df3f4b235e9bd8bc0ee3fd7ce35545610","ssdeep":"","tlshash":"7ae02b996248ba28e5168759512cf7bd301670d1877ca004c940362a3ca64bd5c346a9","first_seen":"2024-08-22T17:20:24.009027Z","last_seen":"2026-06-21T01:46:01.943324Z","times_seen":62,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/bdag-logo-xl.png","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /bdag-logo-xl.png HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 20433\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-4fd1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IG9UliY%2FzWcKc2WZ0Gtxvvi50Ug6Kqd8OAKOicvHFT%2Frv1C%2BdzyTJXudDCBDaEp01ug5%2F7HavHhHXyaNoZnFeYxX1jiGAHmMjHRsaue8Q%2BSdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79524a2607e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1768 x 390, 8-bit/color RGBA, non-interlaced","md5":"ecd7b1eb2b78b216b1a0b03ca72a0b54","sha1":"d09e605c0f350472e1a59e22420666870f703e23","sha256":"6dc1df8cf8f9b4cc4fa4d8afdab4e78eafa5a6cd4a7c63fede6d672fa3358be4","sha512":"473e6de9e68b2e2ab9290995bb2c1264c6329de5e9247d62d495fa0b597f3aceb175913e1a122b511fe43470df259ef64235214d03c06ef015cf0fe8ed97e586","ssdeep":"384:Nu9bhY/IKbrho6/Br8r2rxODhiov4Jhxs0BoQVHPvUqy8NLQDiz:Uk/Pdf/Brw2VOCdvMqy4LQi","tlshash":"b192d1f28c5f7196de8d6a3fb28bd213369f4520d039b0451926d17a188723b53e7ba1","first_seen":"2025-06-19T20:11:15.795922Z","last_seen":"2026-06-21T01:46:01.959617Z","times_seen":63,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/index_1.html","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBkdYq4GanaTR4TkP4w%2Bdl4Tw4fuJhr2FNu3l5MXrpYCqzSsyVACg%2F06FSMZ978O6%2BgKgr%2BPSdaOzR6rixQpk1naDgRMlkyRBC0ertxzaziFTg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f795159ed07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c942614d3f9773e936086634f737ead0","sha1":"b6828780be6ee065e1be2029d66fcc9ffe02d4fb","sha256":"842b929566e8602beee48ed67f7a15f3d2ae4653b620d49101a287dd6932cc08","sha512":"c4d9f8ec86e10fd7337c9537d66c67503a6df4fa2145984e3924998c6712a795dbd17af2280a763447a4435b6e7886e9cfc18482a32a33d4fa3fd881fb6b3333","ssdeep":"","tlshash":"11d02272d106040ecc019aa1cbeae2884446da2cfb105a182df432a0964d2338932b6d","first_seen":"2025-07-13T13:26:15.217606Z","last_seen":"2026-04-11T19:18:11.451719Z","times_seen":52,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T13:57:44.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcDsvFVoUdgWlqUHHjDfq8t3Pkwl%2FFn%2F%2BWfxs%2FhaGDi0x6gxtgreyCeLDPDyekq9HmfIJxJhz4fTA7GGU%2BdHLxZPmWoibhNf3gX3uJakHc7jdQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d2f794ba9a8dcff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56027,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (39271)","md5":"615fa1c25639ab85c0afabc22d2bf313","sha1":"6cc350570ba612c0557a92b78cc791325fb7f175","sha256":"285b63474cb7e2d2cd174f34dfbf304a172a638709f74602c7cce2847536f424","sha512":"214a20c4d8796580a80e41b08455fc77a1da45042891510ef76e85b015d3ccde643d2d063cb08bdcb636ed67d9d1523aefb6335aaabdf8bd949edf1a0e1785f6","ssdeep":"768:/IJEJ+KJNhFXoy/L3O9SsShY+guYb9wVnawyteOvFzAVm/9vRpI8p9vzoCx:/IJEJ+KJVJ/BTMGMzI8HvzoCx","tlshash":"f143f8b1e7ca153b5607cbd8a866a7b9232a590b9b174d8cb77c03f07f84d9ccc26844","first_seen":"2026-02-16T13:46:23.148704Z","last_seen":"2026-03-18T11:31:40.676909Z","times_seen":49,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":85,"dns":50,"connect":8,"send":0,"wait":211,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/2f40c3ca97d9220a.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /2f40c3ca97d9220a.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-18624\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zj3R2Zei9FAuLuJaL6Y5scvlH5IP%2B3nehzEkrn7QArYlocFc0H3wWg7ppz6rnMMXVrVH5bnC1NZgZgWmIEEYINfy%2FcsLMhAcgRoKI%2BGcszDOnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e194d07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceafc4545c326c879c8ddc29a82c45cc","sha1":"f8500017de6c63f669c06b605951ee9d81201c2f","sha256":"457a7a40a94d05f48b90bfca50b8f1b1f0f099be60ef626337754a5544bf37f2","sha512":"2c1fd3806ce13eb36de057b8bc044f154d0dfcec4bf15dfc3184161958bb125390dfff8875199ba96ea7493cd42cd3a39a2f17b7d3a22092b8f6d58596484d64","ssdeep":"768:eRtnoy8JbDCh4h3BC1heYa51obS4JuZ3s7no3SClgNnQN:eRt5gPvH54Y3ko32C","tlshash":"faa365b892bce53dec5bb50a2f4ce4dc1328a0018e275de5e672913b45c26f23d9653e","first_seen":"2026-02-16T13:46:23.159259Z","last_seen":"2026-06-21T01:46:01.952319Z","times_seen":53,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/b667654fec6019f2.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /b667654fec6019f2.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-5734\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxTeofhPNxp1%2FH8TJ1nH2k8nIK%2BmO7p1Nzan7J06yNVOQD90YzLylc2MOodtu8iFKpHnR0CFga0WJkyuM2A4JObfUldY2tInjFAs728CIjQhXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295607e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22324,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22324), with no line terminators","md5":"8e1aeb21e071ef45b2eaf77692606e2b","sha1":"f3a8060971523a19f252ed703ed75b9a48d758c9","sha256":"bd4a1247395355775318501bc2661569de6008e1ce697b8ec34f374d484be857","sha512":"92878550e677ca7914693242e94a0f220c97a44a9f07c990b311e284fa912e97dfa332ebb70d4db693009defe153044f00588c3eb553be8d153613c8f1258f66","ssdeep":"192:ka8r6hlzK9lAXBuXMpHPRo6q67Ld2uwnAvT/FnlT3kOHEt:k56hlzK9lAXBuXWHq6qk5ZLTkt","tlshash":"70a27c5d78543336d84ff005befac50d40bee882bd2158a57a01a13b8be13ef58976b9","first_seen":"2026-02-16T13:46:23.127926Z","last_seen":"2026-06-21T01:46:01.957934Z","times_seen":56,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-2.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-2.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtUQmLJMWg201H0AD27mOXFvvhJWB6yrtpxsQK1N5T4VhS9PRlAOtBlZLze4h89w%2BbLfzVTG32leR5mixFHOd6WvCef7fGBzFQQL12BqaWpLXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e396007e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-3.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-3.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3QtGvAG%2FM5Lh2AkoBPUQIahOfQdnxniKmRPCBJs0hS%2Fv1wd0%2FK%2F52d2YeIZwdG8y%2Fi2ePjRI6fjkT5P567DmZCFOZy%2FYJOKNpg7rn2yE4LL7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e396107e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/13971731025ec697-s.p.woff2","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TufwMtPSZNxX0cvArNOmXua%2BKjr580HbQe7EuHbVgGRx4N9u2lhUllfBwHpSArPi3HHrsGEHFgkZRZRSRU1IAgA2gJC7SR3hTz1N%2Bf7gJNVq3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f795189f707e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-24T08:53:26.745679Z","times_seen":6051,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/index_2.html","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bonus.blockdog.fun/index_1.html","date":"2026-02-24T13:57:46.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdcQrr0HzfyYNmRN0MJ6%2B%2Ff4RyXKA%2F8fX24jogjPBxDq9IZ43o0X%2BhMGIYfNm2nrBUWOyQsJPQM8xWeP1U8TM10qMuygdTjEgLZxuGx%2BySLxJA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79527a3807e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c57807b51b7135a04cbaf45a0118626f","sha1":"86de624de7981f952649a625c1d3e6b9ca8caec9","sha256":"b8cb58dd3848c423833eda3a6eb54fdd648aca6179a6ea34eb50e1242b74df51","sha512":"a7467146ea68779c1996b0dc149142f6275e8172232a477b3a258897a596ddf765e3531fd32dae660927a80003ba80ca939f121263c37584eb47a70e39190a66","ssdeep":"","tlshash":"2ce02d23a262c8064ab083c00fe2f2004007d81aa0338cf4bcf2e49c38d82276016be5","first_seen":"2026-02-16T13:46:23.145232Z","last_seen":"2026-06-21T01:46:01.950274Z","times_seen":50,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-1.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-1.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnASbmf34tIOahXZ6kxRNgl5rC%2FR5ZQEFeV0M9ZduYVL4JjhCPIXxevAxQ5leawSmbya%2BM9R8gJnuzjrUqSxKLIRby%2Bkm2pun7sOP6DCEOitvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e395e07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-5.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-5.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVVZewsFKoLgLbc4AsD18wsNt%2FQZDxkx6Ba8dvGekE2ojlOOJ6g%2FFkok5FQ6gWNG0zLih1XxoM94vQBPUikDWeMqsSutEdj6O0F03FQbQvojAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e396207e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/wallet.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /wallet.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-509\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6aCBRJPBIKFjj5acPJwiyPcv4JrDfY5TXRfNAnp2EK62CHwrGuD2g5XSHkEvYisR0AvdnbjB%2FkwePYx%2BRkcQ3BbL5BPURb%2FkUGmrkP4ALOsMA%3D%3D\"}]}\r\ncf-ray: 9d2f79522a1b07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cc505962f0bf6284d2c001cf6c098f8","sha1":"6c66ebf2ee6273d45ae9942addabf6f95dc3bb6b","sha256":"1a6901c1a76f45513fc5c124c384adda6ac726f3b57fdd3dfebf9d2382447f35","sha512":"0c216c9a83574f29eeea9e8cfc0e21ac5132fc5dd592655f8ff2242c320fb03cc37854a2b9fcd2061b48209e15752b1d72644d23e46cf761bc2aa72fa1d91009","ssdeep":"","tlshash":"5c2157f7a3d595e4d18617d7ff22323d2a95e1b30f14d21a8579a8e0b686d8c48dd880","first_seen":"2025-06-19T20:11:15.768122Z","last_seen":"2026-06-21T01:46:01.926144Z","times_seen":58,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/btc.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /btc.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-5fa\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSY5GmXzJ7glsXrKAz2HlZAy6XOPGPP27CfuNoC4O3V2%2BIVDOqQyLahPFAkQXLertdCDBThmTiw5nt%2F%2B9iPfjiZuGmGV1NMNP2QLcXcjvbo5%2Fw%3D%3D\"}]}\r\ncf-ray: 9d2f79522a1d07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"443f8915322c362589d0d5c3fda8e578","sha1":"76efb7fa20ca7827bbfb2c2a545d426e3d207c8e","sha256":"eac022ee80c36478da9da3574d61a7a812ff0b303ffa59cd2e9b16f1020cf0f2","sha512":"d4e5c555eab5c31727e568cc6f56f332c85e82ea1dda407317cfd0db36da9acb941a39a5ae8e31bb50e0c250d91c9a8ef3ccc75cc61061255d7a414ee23007dc","ssdeep":"","tlshash":"093142d1f3cc21f09b07eb61c90ac176355b28fa7badc34947504f85b9670ca948c9c0","first_seen":"2025-06-19T20:11:15.843006Z","last_seen":"2026-06-21T01:46:01.960241Z","times_seen":71,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-9.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-9.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sz4f2cUxnZP9Pt4zQAI5lWLXu61mD4oX9QDX1S%2F8MAIyF3hnXQatBzM0eMbXifgaVxnJQ4T8k4hWeru6x8EtEMra3%2BakDpRM66ii40HT%2FQlC9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e295807e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/a5a4abdda4f5d95b.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /a5a4abdda4f5d95b.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-20f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNoJMjNkzNUjGRBkjqqEaaU58vXc91ZbMJ6r9tKorM4z4mr7Y9F8bFBtdkxAqUO3kHXNNJjHbSW5YZhLOIxE%2FgHfnOk8ZSB314RFsH4e3bultw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e194307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8436,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8436), with no line terminators","md5":"f1dd8332cb09b49ed69443df5e72fb9c","sha1":"6886d87e590663f9cd9c8b8881afb3aba5f0355e","sha256":"ae96555d9f531faa3bad427ea9840155580da5630161d68873b4988818462c75","sha512":"a45cff97ec5182de984fb26a8b3e346621168d8cb25c362988361f40b66bc8283f22747ff1dc8bb41de569754e44012adb36af479d4a62ce80fc63b76e75cb14","ssdeep":"96:jnK0flfbIFDQ103ZWzXiqJgymkkpFKN4CjjF9nDQ689XIERD8oF7lGUdkXe:zK0qc10AgyEKNbjjnD4nrGOkXe","tlshash":"f702c7b25125623df613ad996adce67c4134ec028f1b9adce20162b6d5c33f31da427e","first_seen":"2026-02-16T13:46:23.150759Z","last_seen":"2026-06-21T01:46:01.918778Z","times_seen":53,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/d5f31c420fd240b4.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /d5f31c420fd240b4.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-3fea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wny0zq%2B4DNBe3QRLHzeciN%2Fuhr7VBPuuPRUNCsubZ3wvmjkZtlNNTu1tiavPzYxegeE5yqnf7pAIxag4ia%2BLNJ6n3RONCt4kYKwVGIFzTXgyDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295207e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16362,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16362), with no line terminators","md5":"cdd2c10a7ea2ccee2c63163aa5298f93","sha1":"831df3339e785e38896ddc3e7891e91d25852a05","sha256":"6e26d32ce052e7d3d70fa8bd8189e8a64ec7087c4887e79042d5ee67b9618384","sha512":"46fd29763c689069e5b5d178c2b35a4d86a17316de9d23f14183c1519f7b894e33a30f5c816598065165fe2fa9a9da6cb24eef5e1bde79870486d7302d1ff45a","ssdeep":"384:krP8wZUyHBs8a4ISwnWOQ6T8TWUTo0rOPBI6l/:GlOyHBs8aqwnWx6oztrOB/","tlshash":"e37222b1d2e9d5bcda5bf298115cac4d5569b086cf1b46e0ba33657e00ce3b138982fc","first_seen":"2026-02-16T13:46:23.160297Z","last_seen":"2026-06-21T01:46:01.954377Z","times_seen":54,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/9e420e0f82b4f3a5.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /9e420e0f82b4f3a5.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-4dac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VK406C0GsPBt1rb9yqRhfKHg0NGol6y3%2FW1PkicvU8WxEAxxlrCWs0q1FFVa%2BPn5%2BmJ9CQ%2FAYJ8OGQxpz7s0oB52g3AaubOJXRcarPS%2B2FuLUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295507e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19884), with no line terminators","md5":"306136b43c9f3b0bf21e5b96befd8421","sha1":"9dd07bd43ac3f3d1c98b73dfcd80ef949cc6ab91","sha256":"b5d4ed0dd17544912d00f7dda53c5bb7dc286aad9ab8b7b932d057aaf1a7b81f","sha512":"a6d94682dde5e09773c1d9070d83cec84ca5dbbf4a926706b10391032aca1b4bd17aebb32eaace01971f6fc08c9e5519ecd80dd5309ba3503e38acd419121e60","ssdeep":"384:zK9hgjVvfKtKj38spRQFrOG723VrhrS0AcfP3:Bt3L6Ujr3","tlshash":"b392a96d31bc9428ec57bc172f48a85e13266471192bb193fd6910ab4cc3bf52ed227e","first_seen":"2026-02-16T13:46:23.161227Z","last_seen":"2026-06-21T01:46:01.955444Z","times_seen":56,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-12.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-12.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXspk54VlpU90%2BQ%2BQfsjhfvDb4qQ4h68EdRfZHnfJfjeHGd5gkd6qqarYye1qjniviQzd5XfPhaVmOu6OtlTqllPc58nqi5l6o6iSMwLe3pPhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e295b07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/out-11.gif","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /out-11.gif HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64x9P%2BysBkoDSsGpYSIct8VHieQv56TJFSo1C7j1Nxa%2FUcA33Qpy%2BnpHEbuhUbfHpxk%2BCoOwe01jQ%2B%2FaWAVg9NzYLw3oL4jkOkUl6%2BypZzqOZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f794e395c07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T09:51:23.968781Z","times_seen":1006525,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/zoom-2.2.7.min.js","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /zoom-2.2.7.min.js HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-10450\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrC9pWae7Bny82ownEKqbUTthykVKXt5qGtyXJs1TgmXmwPI%2B9JvBguxjRQs1evOjZ9WKZlIKBBSWstVPtnWzx5BM1pzIn7ChCAxxx9mpGEi8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e496707e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc942e7188d1ffa35ba420209ae7f7b1","sha1":"7ae97a485cd4d49143f972228864b81005411c6b","sha256":"b60caed9c7bd1d2e3f5dc767d5d322af0ee6852c6f439a7f8315c815f281ab64","sha512":"179be5aca4511439297c2ac81a9c5e2f9574846fdb5c1c3a381e7a2e41ed40d9a976be154ee443ff255b95176865b205dcbf20d8df5411aaccfd0495e15be024","ssdeep":"768:jdMcEcNSeFGElQay75NWoZprO4Nv0HD2lcilS66RcleL4cbMT9KGvz/vdXGc7Rrk:YecE4QCpxv0H64NxlN","tlshash":"145372d81606d4da8e5218eee8b3e009e0645e53cd6cf267967dedc0b56df22c08727b","first_seen":"2026-02-16T13:46:23.130966Z","last_seen":"2026-03-18T11:31:40.690317Z","times_seen":53,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/6ca6224f9376cc31-s.p.woff2","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /6ca6224f9376cc31-s.p.woff2 HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45388\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-b14c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DE%2FHvj2Rj6dQL1VLnUf8Q0LDxLQlo7W8wPgINCbPR6eGR9ndnIEYcR%2FTDUAhtrlBXsmhPlMMSy3Lw%2F4lOHm5Hfty3ByurGbFMNyZJfjUCEahoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f79519a0007e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"2106084f5b102e873ea725173ca8d8d7","sha1":"e4392b8344edc97744d12f9b2e6009f47fa2f19f","sha256":"8b44488a5ebc1871afc2de2427fceb60f8a5be75fbdc7e666b3386fdb0e280e0","sha512":"198f36a883ae293f7f2c97bf0f9ba84ea3c1628e98933d191deb9e358bcd2b18b82176a07d4f56882e72315aee14f5757bb0d522d555e45d9242d41f0a1b80bb","ssdeep":"768:QVvZ9kCZGF/pSpg+0EhCH5wZolZ+curQgOK1V+MvTTGL1Lq:GvZ9jGF/9ch45wClNudsMv/GA","tlshash":"ca13f12ba138a894e1e17d7776a999211da143e3f35e364f0b74f3806aadd284d19c34","first_seen":"2025-02-26T13:37:41.74679Z","last_seen":"2026-07-18T16:06:57.570714Z","times_seen":133,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/4cabe27118829ebf.css","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /4cabe27118829ebf.css HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:45 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: W/\"699290c6-c99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW9mK9hLvyZxx4D4nrnuwBRNy%2BM9xDoMnMpgdhPQiV2%2B%2BkiwythiPPV48gUKMYDofRJ13tYEu3Q90fbbGDc8l5PL0V53i7zgxtmJiJn0hJ%2ByrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d2f794e295007e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3225), with no line terminators","md5":"8c184aadf1382f65dabea790c2d85f40","sha1":"08fbe76f3e09aa1c2fb361df601e683b4c02f7b5","sha256":"7e458b69ccadf6988629f686349201baf545b46e8e7429e60b8575682e211ce5","sha512":"10eba7357d486d4b0c97ee1e7d7592b03df0f17cab557e5121975b17ac293e4b6715cbb10da1ca8965bce2e539f2145af09d0ef71597673b1150c6624ee10b5f","ssdeep":"","tlshash":"4761bdbefb2047bbe9377626bfdc814bd24dd8581f3ac54224a013841ac25e14f50bae","first_seen":"2025-06-22T15:06:13.546395Z","last_seen":"2026-07-23T03:59:47.864057Z","times_seen":77,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/13971731025ec697-s.p.woff2","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\netag: \"699290c6-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u91ydjWGH%2BgWBwVFIEZObJCU23SvqILr%2F5qMHKRM6QIQ%2F8tvwfYGDlq6xe8zC%2F4PA55WG5bUCSFAkLPnF1aHkuOKiv%2BI1%2F%2FDcxUCt320qKLwug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f7951aa0107e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-24T08:53:26.745679Z","times_seen":6051,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonus.blockdog.fun/earning.svg","fqdn":"bonus.blockdog.fun","domain":"blockdog.fun","tld":"fun"},"ip":{"addr":"172.67.129.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bonus.blockdog.fun/","date":"2026-02-24T13:57:45.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdog.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 22:15:18 GMT","end":"Sat, 16 May 2026 23:14:00 GMT"},"fingerprint":{"sha1":"69:46:8B:A2:8D:04:6F:25:57:16:4F:4A:2E:B2:3D:D8:32:40:8B:E5","sha256":"95:F4:FE:95:D3:1E:79:6F:EF:E7:FB:47:E9:65:B9:4B:71:32:26:64:64:D8:1A:5D:6C:2E:9C:F5:9D:3F:AB:C5"}}},"request":{"raw":"GET /earning.svg HTTP/1.1\r\nHost: bonus.blockdog.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonus.blockdog.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 13:57:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 16 Feb 2026 03:36:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699290c6-219\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7AxpXV1UozDvS6fJznalNfnRAySEFvFURzpZaI0CsjMir9j0gB1bWUZTYPYG3Ya%2F7LQBiYUwT0Qk744L7dRjKjakWG7gcQGMmLkhuYAEgDX8Q%3D%3D\"}]}\r\ncf-ray: 9d2f79522a1c07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74ab830b246748644bb8b24409066f57","sha1":"9797116461725d18b31bcf60181484bb1e9cd342","sha256":"c9c8b4682addebad8095c793e2cfae3ec3f55d0155bcc6e58ffdbab9065c7d87","sha512":"efb295acebcdbecf0971499a8ec676ab974cb528d02bae484b799ed16939d3570db955dd6ea10b6a9051e2c0808221af26adbeed1a097813381711044efed3b0","ssdeep":"","tlshash":"eaf020d9d248dde89103c710d50cf7f0423390b23e088c4ac42b1e60d4141bfb514868","first_seen":"2024-08-22T17:20:23.999224Z","last_seen":"2026-06-21T01:46:01.926754Z","times_seen":60,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"bonus.blockdog.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}