{"report_id":"3fb2df90-77b4-4426-ace8-70b8c65c6b3e","version":6,"status":"done","tags":[],"date":"2026-04-06T12:43:59Z","url":{"schema":"http","addr":"bonk-reward.icu","fqdn":"bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"title":"BONKtrade | Trade RWAs on Solana's #1 Community Exchange","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bonk-reward.icu","fqdn":"bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T12:43:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T12:43:34Z","timestamp":1775479414,"ip_dst":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":52246,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-06T12:43:34.311713+0000\",\"flow_id\":175237525559808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":52246,\"dest_ip\":\"216.198.79.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"bonk-reward.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":917,\"bytes_toclient\":3462,\"start\":\"2026-04-06T12:43:34.285184+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T12:43:34Z","timestamp":1775479414,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60158,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-06T12:43:34.716774+0000\",\"flow_id\":2137088392090493,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":60158,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"gentle-shape-a76f.alanuloluwaolatunde.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":951,\"bytes_toclient\":3577,\"start\":\"2026-04-06T12:43:34.709501+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"bonk-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"www.bonk-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-03-06T14:55:00.40356Z","last_seen":"2026-03-27T21:42:53.963674Z","alert_count":0,"request_count":2,"received_data":4291474,"sent_data":927,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bonk-reward.icu","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-06T12:44:00.919945Z","last_seen":"2026-04-06T12:44:00.919945Z","alert_count":1,"request_count":1,"received_data":608543,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bonk-reward.icu","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-06T12:44:00.921716Z","last_seen":"2026-04-06T12:44:00.921716Z","alert_count":2,"request_count":2,"received_data":609121,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-17T19:32:52.003098Z","times_seen":3254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-17T19:32:52.020728Z","times_seen":3362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-17T19:32:52.020043Z","times_seen":3294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-17T19:32:52.002461Z","times_seen":3425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev/","fqdn":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev","domain":"alanuloluwaolatunde.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0475979f8a67bdfa8afebf55873d5065","sha1":"42736cdee8696b36e46760a71e8a763150a6ce9f","sha256":"7a999b775ba322cf245b20db0bebac42a32d761883aa618e0516faf69072a2f0","sha512":"4f4ead635fc02bbc268aa01e843c6933a1f4e8316b1e358e11c6237bea144494d7bbc9d4caf0d6f6088c66a8aa95fb3561fe80f0967c05908d021c4cc77dc718","ssdeep":"3072:/pbNL7xIht9MF03NL7xIht9MF0vLEsNhBS7NAiH0vUVss4i:XL4NL4ThMA3Ji","tlshash":"e06440daeb9b809cce55119ec0b3f889d4440d22ce5cb8a3ee2ddcc1752ab65d48717e","size":307782,"data":"","first_seen":"2026-04-06T12:44:11.740477Z","last_seen":"2026-04-06T13:06:03.823191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-08-05T18:17:41.390527Z","times_seen":3615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf958f0c86105923069d4f4aa519443e","sha1":"5874e171d047e257fe2558ad6e9c24369fa07866","sha256":"136e208cf771371c3660f8c7e5394a92894d666537b2c3c1a1bb0d0186b3714d","sha512":"c42c7184548ccaaa17ae42e05c64a55bb968d7d947b3805da35484b6d947cc7f79120d61318722e5b355b63888f97192df681d77f2652f2db241ef2e990258cc","ssdeep":"768:Tlb1FQDGclcsEa8Fhw571/1s73cOlacBIc4Jcz:Tlb34Mm6","tlshash":"fc134fe06a4be4e48e1611ded037e801e0681967ceacf593ea2cdec1742df26c58753b","size":45312,"data":"","first_seen":"2026-04-06T12:44:11.754203Z","last_seen":"2026-04-06T13:06:03.816973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cf286a05059f4283c117e8bd6119857c","sha1":"f69a8ec208203cce861667633fc815c108ccdd62","sha256":"c02726dfc079d0568f70a6abde91bf7d4b04b079571375530a9a7db979f787b7","sha512":"96f3f5e57f02c5301f7d3a9da8c0163f6f45ae35fe7020567aac5d9bab304864b9cb173d5d0767a825d81be96591e53c3bd1848bd1e8e4f070f6ea51af3fd409","ssdeep":"","tlshash":"c7110e6675891459c657037437867685047ee47186eaeca3f788dfa070a8d621003358","size":1000,"data":"","first_seen":"2026-04-06T12:44:11.755998Z","last_seen":"2026-04-06T12:44:11.755998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-17T19:32:52.01167Z","times_seen":3469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-17T19:32:52.001731Z","times_seen":3510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bonk-reward.icu/","fqdn":"bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T12:43:34.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonk-reward.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 23:15:18 GMT","end":"Fri, 03 Jul 2026 23:15:17 GMT"},"fingerprint":{"sha1":"FB:2F:E4:4C:E9:FB:CA:99:74:03:72:91:4E:BB:DA:5D:32:18:1F:25","sha256":"9F:99:6E:7C:6E:62:4F:F5:1C:90:7F:50:F8:DF:C6:19:88:B2:C3:27:90:E2:9C:A2:A8:9D:1F:45:B8:20:49:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonk-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Mon, 06 Apr 2026 12:43:34 GMT\r\nlocation: https://www.bonk-reward.icu/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::sn9lf-1775479414322-b1e2c1200e42\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":608223,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T22:08:08.205956Z","times_seen":17943375,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":66,"dns":33,"connect":1,"send":0,"wait":11,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"bonk-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T12:43:34.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bonk-reward.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 23:15:18 GMT","end":"Fri, 03 Jul 2026 23:15:17 GMT"},"fingerprint":{"sha1":"B6:55:F7:9A:3B:EB:FF:96:89:B5:81:72:DC:4D:23:8B:2C:B2:24:76","sha256":"B1:90:B2:42:05:04:98:76:9A:8F:C0:56:AD:D1:5C:B1:EF:E9:DF:D3:2C:24:49:A9:6B:02:46:F2:F5:1C:49:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bonk-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 28943\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 06 Apr 2026 12:43:34 GMT\r\netag: W/\"eb8c2da829722e32267b0b52e4a88ff8\"\r\nlast-modified: Mon, 06 Apr 2026 04:41:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pghqv-1775479414470-51fa39b41715\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":608223,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (25409)","md5":"9d953936562584ac4b454048ab96cc46","sha1":"929e2aa4e249ae2f720e69dad717ca1e137cd418","sha256":"5526f788970e401601ceb9b4df83db01d05de0a041eac9312f237a5e137496c6","sha512":"2f914c6dffef96f10bd4d51517b0353b107bdf57895826024805f503563fcc3680958628d9f7086c675be3afece8b83a5a69cc3d6d6e3a7eb655f4148c74de6f","ssdeep":"6144:YEvhMl/1upvhMO/17GvhMD/1UzvhMk/1xIvhMJ/1oh2jCTWik9tJiQL0JpI1uvts:b242t2e2D26K9zYS1VbxEmP","tlshash":"dfd4013942f224772c0386c1f65a7e6afd85a1d7da4ac198b6fd1480afdfeb14463348","first_seen":"2026-04-06T12:44:11.738999Z","last_seen":"2026-04-06T13:06:03.811516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":122,"dns":92,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"www.bonk-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev/","fqdn":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev","domain":"alanuloluwaolatunde.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bonk-reward.icu/","date":"2026-04-06T12:43:34.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alanuloluwaolatunde.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 19:37:55 GMT","end":"Tue, 02 Jun 2026 20:36:31 GMT"},"fingerprint":{"sha1":"C5:F0:15:7E:13:88:86:E0:6D:F4:B4:9A:F3:C3:A3:52:45:DC:4B:32","sha256":"BF:8A:A9:61:00:5E:2D:48:0B:40:3E:F6:C8:E5:F4:22:76:4C:61:16:BE:87:BC:2F:80:F3:CE:D1:59:B7:F6:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gentle-shape-a76f.alanuloluwaolatunde.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bonk-reward.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 12:43:35 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eE9een4cirf4GTClpkBCNo3USImaHN7thN8DgaUww7wbdlqeRySgt4c4wmaiPilnpGLuMk4bs4E7%2BnygwjK9uzIkMAWe4Gkmgc5NiLhPzh8dU6VRKgkrfP24QArUM%2FXlADhEGIWgGyE%2B6chroQ41gBuw46KH7N1nwKKkgsEQlNzmrCTD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e80e1061b07b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50630), with no line terminators","md5":"0475979f8a67bdfa8afebf55873d5065","sha1":"42736cdee8696b36e46760a71e8a763150a6ce9f","sha256":"7a999b775ba322cf245b20db0bebac42a32d761883aa618e0516faf69072a2f0","sha512":"4f4ead635fc02bbc268aa01e843c6933a1f4e8316b1e358e11c6237bea144494d7bbc9d4caf0d6f6088c66a8aa95fb3561fe80f0967c05908d021c4cc77dc718","ssdeep":"3072:/pbNL7xIht9MF03NL7xIht9MF0vLEsNhBS7NAiH0vUVss4i:XL4NL4ThMA3Ji","tlshash":"e06440daeb9b809cce55119ec0b3f889d4440d22ce5cb8a3ee2ddcc1752ab65d48717e","first_seen":"2026-04-06T12:44:11.740477Z","last_seen":"2026-04-06T13:06:03.823191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":66,"dns":46,"connect":1,"send":0,"wait":541,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bonk-reward.icu/favicon.ico","fqdn":"www.bonk-reward.icu","domain":"bonk-reward.icu","tld":"icu"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bonk-reward.icu/","date":"2026-04-06T12:43:35.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bonk-reward.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 23:15:18 GMT","end":"Fri, 03 Jul 2026 23:15:17 GMT"},"fingerprint":{"sha1":"B6:55:F7:9A:3B:EB:FF:96:89:B5:81:72:DC:4D:23:8B:2C:B2:24:76","sha256":"B1:90:B2:42:05:04:98:76:9A:8F:C0:56:AD:D1:5C:B1:EF:E9:DF:D3:2C:24:49:A9:6B:02:46:F2:F5:1C:49:3C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bonk-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bonk-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 06 Apr 2026 12:43:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::7tszg-1775479415593-bb5529e3da78\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"28f27e834d3a1aef0e5334379aa27fe2","sha1":"ce6a051030355a2e7ced67d44b767715c4f05ec2","sha256":"5776dd6e3595c97f11bf8933261805f919cf2c11fcb3e3465482a74472774c09","sha512":"02308d402acab9324119f017920f2b67a83075e484f416d69748098b50a87b26dfb3a7dae95319434a555c564cd5c0747ddb8975353112af75159037e12ba2a1","ssdeep":"","tlshash":"aea0126e05c42a483388021821211639505002115e60a3400088123433085cd9300044","first_seen":"2026-04-06T12:44:11.741801Z","last_seen":"2026-04-06T12:44:11.741801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"www.bonk-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev/?m=2959132","fqdn":"gentle-shape-a76f.alanuloluwaolatunde.workers.dev","domain":"alanuloluwaolatunde.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bonk-reward.icu/","date":"2026-04-06T12:43:35.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alanuloluwaolatunde.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 19:37:55 GMT","end":"Tue, 02 Jun 2026 20:36:31 GMT"},"fingerprint":{"sha1":"C5:F0:15:7E:13:88:86:E0:6D:F4:B4:9A:F3:C3:A3:52:45:DC:4B:32","sha256":"BF:8A:A9:61:00:5E:2D:48:0B:40:3E:F6:C8:E5:F4:22:76:4C:61:16:BE:87:BC:2F:80:F3:CE:D1:59:B7:F6:CE"}}},"request":{"raw":"GET /?m=2959132 HTTP/1.1\r\nHost: gentle-shape-a76f.alanuloluwaolatunde.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bonk-reward.icu/\r\nOrigin: https://www.bonk-reward.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:43:36 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYuhqd6ogYfHszFjCP2SH%2FZuQW6X4dkDPSFUL0QJYnurgYYw5cvaHvwSwzfOg3%2F0B%2FX3GBbzE8265POBaJK63znI77xOeXOg0bdnLKbQ60ju3QDAWaM4UVY6zgGIlK%2FZVq9UtU5y8aSf0o0%2BmoKN%2BhI4tNOAmD0%2FK%2Fcs0WXF1zSA%2FOMx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e80e10bab823181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3981194,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7f5263753e210b036c10c95cdd31050","sha1":"be1facc8c8d578a163956cf0ac5251328b0c7b5a","sha256":"7bbe0b711529cd1078cbd450946830452a5542bb2e27f1cf07941801f70c8114","sha512":"988e8d10cc7cad07f433574168b75769719e0c27fe023959c99e8f2cb07f232cd37ae9f67e3c33d3505fba592037f56b1c787b4782f83cff102e50ccae24a1c9","ssdeep":"24576:jZUWMIIlUS+qZbo01Cc2UjC1UItYIhbZz7R/gUNXCn:j2WMPl6il1Cc2eClpzlIaG","tlshash":"6f2512e3a1c2a0c7331599a0ffc26d9dad99600df5ca4b735649ec1930df067c6e8ae1","first_seen":"2026-04-06T12:44:11.743073Z","last_seen":"2026-04-06T13:06:03.813567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":20,"dns":1,"connect":0,"send":0,"wait":784,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}