{"report_id":"45e1f390-93d8-408e-b1b6-3f206176c55a","version":6,"status":"done","tags":[],"date":"2025-10-11T11:47:23Z","url":{"schema":"http","addr":"vjxxx.com/check-check-bots?url=https://pxl-eu.rtb.tsyndicate.com/do2/direct?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYYIGvQyAFjRosZZHKQaUFDzJgcLXKUiTGmBRkaNcKUkSFmhhgZIkU4HONGoY4YJHE4DFNnDEYbNWLIoCFDKg4YNkrKmIHjRkmhIsSkIfM06tSqMq5mnbG169elZOwsnFpDRg4bDuHUETNxqg28D-Fc1DHjBg4ZDUXMgSNRB43CM3BSFFEGD50vixuLqBEVR4wbNsCOaTM4hukcURMbNLMwsRg3bhba-GyDLeA2bjw6xkoyL27dN2JgheGwTgyMaOhYnKPjxYs70F2cefPmDJsyLsa8afNiTkE5Y9D8iNNjTho6deasOBOmTZrcK1q0QBFGjpo6bsLcdVOGTvbtKXBRB0gy2PAGeeahpx577sEnH3324aefDfz5p10bAQ4IQ4FnzPEFG2PIAUcPRZyhhRphIKGEHWJcUUUeQpxxRhBFFFFFFk-QkYQQQ1CRBAxNEBGFHmGoIUQcTthwxhBFiBHEEEGYUYQRU8xRxRpTMPEEDk24gQUeQlQhhxFKFJGGHnYQoUQMAhJowxhspFGGG3T00MYcLYThBhlyvDFWC3O0Nwd-ZwA6R5sb2jDHG3WAV8ZYPYTXZxtltNDGG2Jdh2iBcvZQBRVGtIADWGRsh5EdauCh6n9tiFafbCANFUZjW8wQQxd5gbcQDC6AVNJQcLTxBRy66sBrDDU4JIcdg9VAHGVjBLurCzMUV0caGMlgBgxmjHFYDaKWQQMNLdTg2Uo4jEGDDTZtZUYYMJQhRg1kXAVWGoOJMIMNLoDmggxYuRADDjmAVUcYGDXxhh5psMFGGC_U0CsIKDDxXh147ABCEHv2ORYIUmncBMDCrZnDFEeAIMS1bJDxwhRLRBHDv6YBLEOvMMSQwsaCXXeFvEucF3Fh1NpA8RJIUNEEEyyAEOcaZYBwRBljrPHGzlYgZN4bbrxAw8RDoDFpGS_EQAOvvN4wwww5_AvDDSAonGnUU4TxrhxpDH1D0aI5pYMISRAB1htyfDGG34AL7hCIGAVOahl2fCFHGWxMlFUOOOUA8LMHRU6s5c_KcUZsR42klAidfyGGHHMBlvqlZDmGLFIO8flG6zI49IZRj-nuoR0ILbTu2bVDPlGub-CRx_Go50E6HXLUUYZDcyyLUZ90zEp4C_idV-7MZIxxw-DVy3WUXzdshZXriB_0RfjjV9TqUaDlfANoW8kvw0T1f4Y_V1yBi-TKsJgvzIp_WfGfDfJHmciF4TpyoINRalUDXD1EDJo5yLvqwAaJ5IVxxhqKbp4VnoW4gYNs6IMCAgI=\u0026s=4420824d34ef92b290f1d0165a2631552d97d939176c5dca49ed24512ff149f81760177623","fqdn":"vjxxx.com","domain":"vjxxx.com","tld":"com"},"ip":{"addr":"109.206.161.36","port":0,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"title":"Stripchat - Non Nude Cams | Chat with Sexy Non-Nude Girls \u0026 Men"},"submit":{"url":{"schema":"http","addr":"vjxxx.com/check-check-bots?url=https://pxl-eu.rtb.tsyndicate.com/do2/direct?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYYIGvQyAFjRosZZHKQaUFDzJgcLXKUiTGmBRkaNcKUkSFmhhgZIkU4HONGoY4YJHE4DFNnDEYbNWLIoCFDKg4YNkrKmIHjRkmhIsSkIfM06tSqMq5mnbG169elZOwsnFpDRg4bDuHUETNxqg28D-Fc1DHjBg4ZDUXMgSNRB43CM3BSFFEGD50vixuLqBEVR4wbNsCOaTM4hukcURMbNLMwsRg3bhba-GyDLeA2bjw6xkoyL27dN2JgheGwTgyMaOhYnKPjxYs70F2cefPmDJsyLsa8afNiTkE5Y9D8iNNjTho6deasOBOmTZrcK1q0QBFGjpo6bsLcdVOGTvbtKXBRB0gy2PAGeeahpx577sEnH3324aefDfz5p10bAQ4IQ4FnzPEFG2PIAUcPRZyhhRphIKGEHWJcUUUeQpxxRhBFFFFFFk-QkYQQQ1CRBAxNEBGFHmGoIUQcTthwxhBFiBHEEEGYUYQRU8xRxRpTMPEEDk24gQUeQlQhhxFKFJGGHnYQoUQMAhJowxhspFGGG3T00MYcLYThBhlyvDFWC3O0Nwd-ZwA6R5sb2jDHG3WAV8ZYPYTXZxtltNDGG2Jdh2iBcvZQBRVGtIADWGRsh5EdauCh6n9tiFafbCANFUZjW8wQQxd5gbcQDC6AVNJQcLTxBRy66sBrDDU4JIcdg9VAHGVjBLurCzMUV0caGMlgBgxmjHFYDaKWQQMNLdTg2Uo4jEGDDTZtZUYYMJQhRg1kXAVWGoOJMIMNLoDmggxYuRADDjmAVUcYGDXxhh5psMFGGC_U0CsIKDDxXh147ABCEHv2ORYIUmncBMDCrZnDFEeAIMS1bJDxwhRLRBHDv6YBLEOvMMSQwsaCXXeFvEucF3Fh1NpA8RJIUNEEEyyAEOcaZYBwRBljrPHGzlYgZN4bbrxAw8RDoDFpGS_EQAOvvN4wwww5_AvDDSAonGnUU4TxrhxpDH1D0aI5pYMISRAB1htyfDGG34AL7hCIGAVOahl2fCFHGWxMlFUOOOUA8LMHRU6s5c_KcUZsR42klAidfyGGHHMBlvqlZDmGLFIO8flG6zI49IZRj-nuoR0ILbTu2bVDPlGub-CRx_Go50E6HXLUUYZDcyyLUZ90zEp4C_idV-7MZIxxw-DVy3WUXzdshZXriB_0RfjjV9TqUaDlfANoW8kvw0T1f4Y_V1yBi-TKsJgvzIp_WfGfDfJHmciF4TpyoINRalUDXD1EDJo5yLvqwAaJ5IVxxhqKbp4VnoW4gYNs6IMCAgI=\u0026s=4420824d34ef92b290f1d0165a2631552d97d939176c5dca49ed24512ff149f81760177623","fqdn":"vjxxx.com","domain":"vjxxx.com","tld":"com"},"ip":{"addr":"109.206.161.36","port":0,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T11:47:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pxl-eu.rtb.tsyndicate.com","ip":{"addr":"144.76.174.214","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":227353,"first_seen":"2025-07-19T14:14:51.069162Z","last_seen":"2025-10-10T21:54:29.406658Z","alert_count":0,"request_count":1,"received_data":819,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":6065,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-05T22:12:07.360997Z","alert_count":0,"request_count":1,"received_data":825839,"sent_data":502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.xlivrdr.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-22","domain_rank":49821,"first_seen":"2021-07-02T10:51:24Z","last_seen":"2025-10-06T06:06:09.312941Z","alert_count":0,"request_count":1,"received_data":2935,"sent_data":664,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"77.93.81.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-23","domain_rank":44916,"first_seen":"2025-07-24T09:14:17.646084Z","last_seen":"2025-10-07T13:45:25.477537Z","alert_count":0,"request_count":1,"received_data":456,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"go.blcdog.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-09","domain_rank":187088,"first_seen":"2024-08-05T17:47:15Z","last_seen":"2025-10-07T09:02:44.211343Z","alert_count":5,"request_count":5,"received_data":17591,"sent_data":4330,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative.blcdog.com","ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-09","domain_rank":254844,"first_seen":"2024-08-05T16:47:18Z","last_seen":"2025-10-10T21:50:12.92122Z","alert_count":10,"request_count":10,"received_data":866884,"sent_data":9312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2025-10-06T06:06:08.644997Z","alert_count":0,"request_count":2,"received_data":878,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":1,"received_data":1760,"sent_data":439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vjxxx.com","ip":{"addr":"109.206.161.36","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-11-25","domain_rank":171180,"first_seen":"2020-07-14T12:34:03Z","last_seen":"2025-10-10T21:54:29.38998Z","alert_count":0,"request_count":1,"received_data":935,"sent_data":1943,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":1,"received_data":21307,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2025-10-06T00:33:22.060877Z","alert_count":0,"request_count":5,"received_data":56271,"sent_data":2312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/saretarget.93a706fdc4e34928deaa.js","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9582f1c2cb1220ae8f9b8d1103ae0d7","sha1":"62bc0fc1c54f8c24b18b04c8d49d9c4e236c28c4","sha256":"b6db7a0687e58b6dce588cb355704e4606ee5c7d2a6d63e2a2047cf83f0c27e8","sha512":"f604e6d96a93c06d11c7c02f22edc1d92bbc5775f6e23c9709cbc9d0130a2b69fc2bcbd43546e657e69b353b432daabca5d879caff322b00ad206236fda31318","ssdeep":"96:QvyYBkHNxfvaWpou6TcBGOtbSqykjmzFyaO:QvdCt9ocBdtbtr","tlshash":"73a1439871d3f5e606975090403f630bf23e0f65205ee192e796ead17930eea9072e6a","size":4762,"data":"","first_seen":"2025-10-02T14:28:29.292782Z","last_seen":"2025-11-19T07:25:11.190206Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/main.0adc2e709dbe32b6a754.js","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b80e4f2ec4e3117dff3700dd7837e63","sha1":"66845a5c2c420e63cfdec8ca4fcb728b9d28d8cc","sha256":"700fc8226c39fd84e4432c9be798ed51a95a6735de639593b6d1510b54afc0c7","sha512":"cf02796b5b95447d1e02f713d5d0f329462f1319cb5f805a397a1366469a89743b7b21777050ba08a11ed58496c7b7ced3bc245f4a59311322e6eacad4dc3ad8","ssdeep":"6144:386xS+mpezt05Ft51MK0H5ahHhhUBI1sHEwAX5TlzAXb1:3pxc5fQw7vsPwyR","tlshash":"9af449c87796f06643d7a156503f0603f239aa592409d018f29aecec786dd8ee277f36","size":757735,"data":"","first_seen":"2025-10-02T14:28:29.287241Z","last_seen":"2025-10-23T07:10:49.033823Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-03T18:32:33.0653Z","times_seen":125576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bfa697e870a29bd54edc62b7b427ca0","sha1":"6f3005bb21a2a6e8f473e6728910bd257c6aa927","sha256":"f168947f0399d1fc3ebeb320423b02b1e1edd3faa0ea0ee072f9bfbc1896c51b","sha512":"42c6ed8391a2eeb30c8485d234074a0698af0cf173ceea31b779fca70a5ad50edb2fe1a66ca839a85f497262cbb163f42f9dc0361b82f03865f538ba8664bc79","ssdeep":"","tlshash":"551112771a04a03d4b7119d1b1fecb71e891741cb15844dcb556dac42e6dccbce05549","size":1060,"data":"","first_seen":"2025-10-07T07:37:19.84514Z","last_seen":"2025-10-13T15:54:30.785893Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1760182950/57297042_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1760182950/57297042_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13282\r\netag: \"8e50ac051915868f773280183aeab1c6\"\r\nlast-modified: Sat, 11 Oct 2025 11:41:38 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 255\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ce1ed26f127127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e50ac051915868f773280183aeab1c6","sha1":"3f40e656ec25394fa01d12d0b0f68db43e7b8bda","sha256":"5e2f88b106667a7939aaaaeab2e4f970495e66bdb925614948bdcaad54f27e99","sha512":"72f2cf5149c7a8a0bd987024d433957707369ba7cbd184df937b58ae91ed2db4b914ce544488bc4abec3f92100563f8d54f183ddc7499f5657fc79d15d55c395","ssdeep":"192:PEhrEcZ9hUDJ8DNTdk0hzK3t5MhSVB/k/cXaXZhELXCVQzP7oJNrW6H3kD/kxsV:8hwcV06DNZh8/MOS/9XZmLX7U2D/6sV","tlshash":"8652d0cca1640444ada7fec7a2a210f45a079746e52c8eb7a9f0b47b8a34e5e54905c6","first_seen":"2025-10-11T11:47:26.848372Z","last_seen":"2025-10-11T11:47:26.848372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":59,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/app/domain-checker/check-result","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 239\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncf-ray: 98ce1ed3a83ac272-OSL\r\naccess-control-allow-origin: https://creative.blcdog.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/main.0adc2e709dbe32b6a754.js","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/main.0adc2e709dbe32b6a754.js HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0adc2e709dbe32b6a754.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:31:00 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"4b80e4f2ec4e3117dff3700dd7837e63\"\r\nage: 2116\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu%2Fu1GqHSZbBbhTNb6fvDZEw1yCZLcPklevrzaKPG%2BePrcCRKBhIH%2FTqhpHOSnyn8GbU9D2HWrhL21l9r%2BmdIwd8EZ3SxpBVuZEysh34nex%2Fotw%3D\"}]}\r\ncf-ray: 98ce1ece8f790883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":757735,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4b80e4f2ec4e3117dff3700dd7837e63","sha1":"66845a5c2c420e63cfdec8ca4fcb728b9d28d8cc","sha256":"700fc8226c39fd84e4432c9be798ed51a95a6735de639593b6d1510b54afc0c7","sha512":"cf02796b5b95447d1e02f713d5d0f329462f1319cb5f805a397a1366469a89743b7b21777050ba08a11ed58496c7b7ced3bc245f4a59311322e6eacad4dc3ad8","ssdeep":"6144:386xS+mpezt05Ft51MK0H5ahHhhUBI1sHEwAX5TlzAXb1:3pxc5fQw7vsPwyR","tlshash":"9af449c87796f06643d7a156503f0603f239aa592409d018f29aecec786dd8ee277f36","first_seen":"2025-10-02T14:28:29.287241Z","last_seen":"2025-10-23T07:10:49.033823Z","times_seen":45,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1760182620/130503003_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1760182620/130503003_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9990\r\netag: \"247f61bcd5b69f376910825bcf5c2680\"\r\nlast-modified: Sat, 11 Oct 2025 11:36:01 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 587\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ce1ed2df6d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"247f61bcd5b69f376910825bcf5c2680","sha1":"cd984ea478abad10262887603866609beb178367","sha256":"60522076e4fe30e07c270beacdbfd9574d235adcb9d1394008a54e184d2ef9a8","sha512":"fb3d4e079fe6edc6bfc4a3c0eba7215f1d71cf489de07eb740d7d685839b55afb18c0d39bfc953dff1d93c268f46bcf8fcd3747ddf24372e44a1032277c8e4ba","ssdeep":"192:4jD2tlPdU6f7bRmZf81STRKfxitzeaseJaEiSZq5m5z2PMMFiAmmnwV:4jD2tVBXsZfHGyNseaG0Y2wV","tlshash":"3a22af71473e0ac79ff492d429d6d412d27d98d210afe987093b05cfd8d2677e0a88d4","first_seen":"2025-10-11T11:47:26.855803Z","last_seen":"2025-10-11T11:47:26.855803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":124,"dns":0,"connect":5,"send":0,"wait":11,"receive":1,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1760182590/99014092_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1760182590/99014092_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11516\r\netag: \"cb80e625e5532ff581352b62e55a1d3a\"\r\nlast-modified: Sat, 11 Oct 2025 11:36:53 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 588\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ce1ed2bf497127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb80e625e5532ff581352b62e55a1d3a","sha1":"65b14edce8f7fe299193c73edecc0f32599cf82c","sha256":"a574cce24e357e8bb65db0dc68e35ff8b2b3afbd5c8cc4dfa7845f51752395b2","sha512":"f9d881e5e616e06d66b343c0c7b1798cfad870288e4f4124640caf86b5f88fd7b031aadabd8f15c85094ae8663b06a6b0f3029f0cfcf0057f0aeba9288f977a5","ssdeep":"192:VfDNmzKSH2ApcyKG+WfZTOC0xcYD4nVINSHR7IZj89QuZKfXLrQTrpg5n5lfCtDE:JDuJH2AWtGp6C0xci4nVuSHCjI4XCu6K","tlshash":"4032b0406e6ad5257c459fafe5f4ecaa41efbf7b53e004b896d12d0d8308b504eed428","first_seen":"2025-10-11T11:47:26.859858Z","last_seen":"2025-10-11T11:47:26.859858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":100,"dns":0,"connect":5,"send":0,"wait":9,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.rtb.tsyndicate.com/do2/direct?c","fqdn":"pxl-eu.rtb.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"144.76.174.214","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T11:47:00.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 20:10:55 GMT","end":"Mon, 08 Dec 2025 20:10:54 GMT"},"fingerprint":{"sha1":"5B:35:43:99:9D:DA:A6:63:1A:29:3A:1F:65:5F:37:B9:02:5E:A2:DD","sha256":"65:5C:80:3B:32:5C:99:85:8A:E5:9B:C0:83:86:B8:13:23:1D:E3:12:22:B9:47:CD:00:52:92:E3:AF:8F:4E:8D"}}},"request":{"raw":"GET /do2/direct?c HTTP/1.1\r\nHost: pxl-eu.rtb.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vjxxx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 11:47:00 GMT\r\ncontent-length: 0\r\ncache-control: no-cache, no-store, no-transform, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\nx-api-version: 2\r\nx-action-skip: 1\r\nlocation: //cdn.tsyndicate.com/error/banner_click.html\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":478,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":101,"dns":41,"connect":25,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T11:47:01.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765 HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 06:52:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ln%2BrvbejgisuQwuGCJgzeWucJyP3FKYQglTUWvfpeajCs6UzLJfLRxs3USX%2BQwQdX4%2FtI94D5xUhK4agHYy82q9kZd5IKfjKBovofZwMpUgazI%3D\"}]}\r\nexpires: Sat, 11 Oct 2025 11:47:11 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 98ce1ecd3a50c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1929), with no line terminators","md5":"dbc4c23529adebae0bfe77d930aa3b71","sha1":"49c7f5bfe4b79d1bac0b3303514ef8b3258590cf","sha256":"991592c25aa070e02c9a42d8bb3566cb2a34187b3fa2c06857ebd278d1eb6e63","sha512":"be449ccc12a706b0c48601ef083eeaac54a1811f640005f50a512af12e4bdb86432254626b4d3b70ee7592a881a189e9932ab3f29d1af68d325cd2741ce7abda","ssdeep":"","tlshash":"4d41ed178400c54d7670d3b6b6613168d90fb50def21fee4bca908ebe9a9fc242b7912","first_seen":"2025-10-02T14:28:29.280418Z","last_seen":"2025-10-23T07:10:49.039196Z","times_seen":41,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":57,"dns":5,"connect":1,"send":0,"wait":106,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 11 Oct 2025 11:47:01 GMT\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-04-03T17:48:25.452867Z","times_seen":3336,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":123,"dns":2,"connect":28,"send":0,"wait":44,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/config?url=https%3A%2F%2Fcreative.blcdog.com%2FLPAkira%3Faction%3DsbSignupWithModel%26autoplay%3DallInFocus%26autoplayForce%3D1%26campaignId%3D9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd%26campaignType%3Dsmartpop%26creativeId%3D50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865%26iterationId%3D1081157%26masterSmartpopId%3D1603%26p1%3Dclickerror%26ruleId%3D374%26smartpopId%3D1550%26sourceId%3DCDN_campaign%26trafficType%3Dpopunder%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D34765","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.blcdog.com%2FLPAkira%3Faction%3DsbSignupWithModel%26autoplay%3DallInFocus%26autoplayForce%3D1%26campaignId%3D9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd%26campaignType%3Dsmartpop%26creativeId%3D50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865%26iterationId%3D1081157%26masterSmartpopId%3D1603%26p1%3Dclickerror%26ruleId%3D374%26smartpopId%3D1550%26sourceId%3DCDN_campaign%26trafficType%3Dpopunder%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D34765 HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/json\r\ncf-ray: 98ce1ed06e7fb51e-OSL\r\naccess-control-allow-origin: https://creative.blcdog.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7358,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc38f4b144994881f3feb99d62001aeb","sha1":"89b1cd298b96fd716b9cd564d20331e834971a67","sha256":"fafabb74f75425b04ba293b637ee478dcc8e49e354868afc2da61f1ec000fd65","sha512":"cfaf6dfe0417d67d572f0b76a02f37d21e1f88a705ed9270f4787295dfb1aea56d045a61f1765ca8cfad577f902b94da718da6edcb16968831515cba366ddf55","ssdeep":"192:96DyVXlYbGkokUiapjPRbb4Hh8nyayqh13/7VlloqJIwi13Y6yQ13/7VlloqJIwJ:pVElokmpL9b+lg5eH","tlshash":"40e133eb931e64bb16844d4ebe1e78c47a5c40b74e89c8efdc988438415d3b212b77e9","first_seen":"2025-10-11T11:47:26.867667Z","last_seen":"2025-10-11T11:47:26.867667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":70,"dns":5,"connect":3,"send":0,"wait":34,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/app/domain-checker/get-check","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: application/json\r\ncf-ray: 98ce1ed1abd5c272-OSL\r\naccess-control-allow-origin: https://creative.blcdog.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a622b8d5d2019d449aed7c05aa73e1a1","sha1":"32ee08dc106e4077ae30f7351a0c03bb60ae15ae","sha256":"6b61ad0224769b6c9b10558a7ac6283cd2bd28335e69b9b9ff5fe0e3e0942b66","sha512":"f37c2dc9722b3f58c3474f0c8a57f6ce7b229c9c48ab88d6b8185e286b796b7521cd8b80939c0c1dc1725e2de12d6fb906e34d8bcf16b69fed2056b562cb3b84","ssdeep":"","tlshash":"afd02217410cb143c0c8c1c03e3f9588281428a10d018cf08ecc60acc0dc2300c33a12","first_seen":"2025-10-11T11:47:26.870526Z","last_seen":"2025-10-11T11:47:26.870526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/favicon.ico","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.tsyndicate.com/error/banner_click.html","date":"2025-10-11T11:47:01.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.tsyndicate.com/error/banner_click.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 14:59:37 GMT\r\nexpires: Sat, 10 Oct 2026 14:59:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 74845\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-03-30T18:12:53.501353Z","times_seen":16338,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":71,"dns":1,"connect":21,"send":0,"wait":24,"receive":91,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:40 GMT","end":"Mon, 15 Dec 2025 08:42:39 GMT"},"fingerprint":{"sha1":"99:C6:4E:8E:B8:5B:D1:99:2A:8E:B6:F5:1D:F0:C9:9F:D1:98:60:99","sha256":"5E:61:10:69:80:4E:43:5E:5C:BC:64:28:29:74:91:F6:DC:3B:42:28:2D:71:3C:A4:FA:4E:A8:88:A1:46:E6:39"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 11 Oct 2025 11:47:01 GMT\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1060,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1060), with no line terminators","md5":"8bfa697e870a29bd54edc62b7b427ca0","sha1":"6f3005bb21a2a6e8f473e6728910bd257c6aa927","sha256":"f168947f0399d1fc3ebeb320423b02b1e1edd3faa0ea0ee072f9bfbc1896c51b","sha512":"42c6ed8391a2eeb30c8485d234074a0698af0cf173ceea31b779fca70a5ad50edb2fe1a66ca839a85f497262cbb163f42f9dc0361b82f03865f538ba8664bc79","ssdeep":"","tlshash":"551112771a04a03d4b7119d1b1fecb71e891741cb15844dcb556dac42e6dccbce05549","first_seen":"2025-10-07T07:37:19.84514Z","last_seen":"2025-10-13T15:54:30.785893Z","times_seen":477,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/abc.gif?action=sbSignupWithModel\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\u0026language=en\u0026agev=0\u0026nonNudeContent=0\u0026thumbFit=cover\u0026quality=original\u0026thumbType=SChatBest\u0026stripcashR=0\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=LPAkira\u0026referrer\u0026i=0\u0026abTest=lpakira_default260925\u0026abTestVariant=lpakira_default260925_default_79\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A0%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A418%2C%22duration%22%3A33%2C%22transferSize%22%3A2747%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A418%2C%22duration%22%3A35%2C%22transferSize%22%3A13985%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A419%2C%22duration%22%3A55%2C%22transferSize%22%3A201124%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A595%2C%22duration%22%3A114%2C%22transferSize%22%3A0%7D%5D\u0026mh=1657778970","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"GET /abc.gif?action=sbSignupWithModel\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\u0026language=en\u0026agev=0\u0026nonNudeContent=0\u0026thumbFit=cover\u0026quality=original\u0026thumbType=SChatBest\u0026stripcashR=0\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=LPAkira\u0026referrer\u0026i=0\u0026abTest=lpakira_default260925\u0026abTestVariant=lpakira_default260925_default_79\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A0%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A418%2C%22duration%22%3A33%2C%22transferSize%22%3A2747%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A418%2C%22duration%22%3A35%2C%22transferSize%22%3A13985%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A419%2C%22duration%22%3A55%2C%22transferSize%22%3A201124%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A595%2C%22duration%22%3A114%2C%22transferSize%22%3A0%7D%5D\u0026mh=1657778970 HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 98ce1ed14ad4c272-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1760182770/129219002_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1760182770/129219002_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9314\r\netag: \"4b81f95c1df6ff7e49ddb484ba233163\"\r\nlast-modified: Sat, 11 Oct 2025 11:38:09 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 422\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ce1ed2ff877127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b81f95c1df6ff7e49ddb484ba233163","sha1":"2fbddf88471c74d5999902da32c86137dc41df0b","sha256":"f71103bee7665ebea7bd645a50112c1e3fd1ed455569470b44752c0602d2b674","sha512":"afe99aa9880e0afc4e5832286a376e3621a7d4b8266c16c9b79061c0500fd6d0f203a98ddbb482b428b49e652bfad72e81ec9fd1e3749fd61bce0bd1d4d6fd72","ssdeep":"192:y86BFQcL4qfHMpPUyvICos5+eIvaLUhbjEngWzrX+WIiYi:LcQeMpUelJ1Q0Vrl4i","tlshash":"1b12af1936979eec5c37e65759b699e5503864f6ec090f7ac91100423976ec8e7ccd40","first_seen":"2025-10-11T11:47:26.876154Z","last_seen":"2025-10-11T11:47:26.876154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":141,"dns":7,"connect":3,"send":0,"wait":22,"receive":1,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/saretarget.93a706fdc4e34928deaa.js","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/saretarget.93a706fdc4e34928deaa.js HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.93a706fdc4e34928deaa.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"b9582f1c2cb1220ae8f9b8d1103ae0d7\"\r\nage: 2907\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2kIogCX7a7hf3j5feb4oTh3eOG%2FxryIefxGVuH0bmtYtnuQg3wYw3XUec6CvS8mKiXU9gZVwfCw%2Bw84SrlGg0CZBOaOegB6SM8xcg6psjNwIsE%3D\"}]}\r\ncf-ray: 98ce1ece8f780883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4762), with no line terminators","md5":"b9582f1c2cb1220ae8f9b8d1103ae0d7","sha1":"62bc0fc1c54f8c24b18b04c8d49d9c4e236c28c4","sha256":"b6db7a0687e58b6dce588cb355704e4606ee5c7d2a6d63e2a2047cf83f0c27e8","sha512":"f604e6d96a93c06d11c7c02f22edc1d92bbc5775f6e23c9709cbc9d0130a2b69fc2bcbd43546e657e69b353b432daabca5d879caff322b00ad206236fda31318","ssdeep":"96:QvyYBkHNxfvaWpou6TcBGOtbSqykjmzFyaO:QvdCt9ocBdtbtr","tlshash":"73a1439871d3f5e606975090403f630bf23e0f65205ee192e796ead17930eea9072e6a","first_seen":"2025-10-02T14:28:29.292782Z","last_seen":"2025-11-19T07:25:11.190206Z","times_seen":96,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/lang/en.json","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/lang/en.json HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"9b5b138797a41cef08f1e15848bdcd92\"\r\nage: 185\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxwdPMI9%2BkKuWedlVJhKJ53yC0ZvJBRpPSHcoFTuOEBwu78U3%2Bc5IQLGhSuoKo6pJlM1lVJX2DY0TPoZOPqGq%2FmfZEaEWgd2Jaus3PuFB7WAqqY%3D\"}]}\r\ncf-ray: 98ce1ecfefa10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9099,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b5b138797a41cef08f1e15848bdcd92","sha1":"8c09578ccb5f93f30fcc9405e4e2598aa5419c0d","sha256":"8d1a24c11dfe61b7f309ebd6e94918e0145f5e286520485fcfca8f4bd298d3b9","sha512":"04d85583323b5a5d70636ce680a4eeed4bd4eb380394f13f657151cfba32c5da0f9fcf0e85a1d8d97634a9c18ce28927deefd0fb5dbeda788d57fc0aa9eb1355","ssdeep":"192:mNijkjUfB2GEp4peALeAInTu5M5s3drl8bitC9bitCr0+m:BfB2G1p9L98uCa3dybPbm","tlshash":"ee12d71fb745163305d500b27b8b2ea3bf059c5a87163835af4a901813ae6df923f79d","first_seen":"2025-01-17T06:09:10.804979Z","last_seen":"2026-03-31T21:52:17.716218Z","times_seen":340,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/assets/favicon-heart-16.png","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/assets/favicon-heart-16.png HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 403\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlHYYZtT3B31x1o%2Fp0G1gFljv5%2B3YmaOni%2FhalC01Dyor7viwyBX2XGargkD2uxH63zXXHwwbtq7VKu05bIONCFfBf7FmZthrSnFRRnJBxNaQa0%3D\"}]}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"favicon-heart-16.png\"\r\netag: \"6697f6d6c35483d4f8ecfcc6b2acd601\"\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\naccept-ranges: bytes\r\nage: 2097\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ce1ed13fcb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6697f6d6c35483d4f8ecfcc6b2acd601","sha1":"517baeadaea8c1205c505254d76a2e38e69d4c63","sha256":"2db351009c7241e96363ff3287a5654b33b1d051f53ad73205faf6f323ad6588","sha512":"7a1c8710512c83dea951c910da6f3ded75641dbbcc4c264e6de07061d07f08151f0a2c9290ee5de4e5388073d2b3e5183b140a9a57a47afa18f0730bd51c4593","ssdeep":"","tlshash":"1ee0f1d0738e7bf0deae84ba8c5bfe24b11677640214809c02f22121e6d5c5935d499d","first_seen":"2023-09-08T19:51:57Z","last_seen":"2026-03-31T21:52:17.564991Z","times_seen":453,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/api/models?landing=LPAkira\u0026masterSmartpopId=1603\u0026smartpopId=1550\u0026trafficType=popunder\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=5","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"GET /api/models?landing=LPAkira\u0026masterSmartpopId=1603\u0026smartpopId=1550\u0026trafficType=popunder\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026limit=5 HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: application/json\r\ncf-ray: 98ce1ed14ad6c272-OSL\r\naccess-control-allow-origin: https://creative.blcdog.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Oct 2025 11:47:02 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f80c00df4220fdd7d91a1329a81dd7ae","sha1":"5bbda0074c7dc94de7f123b2731c8869e89255f8","sha256":"30a1e9224e7b4ca88e1b7ce2233c58c7368b4c2f617919cdc34f9305014c413a","sha512":"a5e42bab1957a93f593efa92a615c552ab42af033954c8fbcc9d2cd518e2057bff842227049f58a3e297345abe867009b5a4b096fd3a019b8da04c83c9596f8d","ssdeep":"192:l+RqtzrzezCuz6Eo8tzMzrz1ejWTh6tzBzczzZDSnlFWtzpz0zpSFIXUQHWd9tzL:lntzrzezh6GtzMzrzkjztzBzczzZWnOh","tlshash":"e6f1f1fb62cc5c7b0f4a12c8cc8d750dd88b2a2b75c4f3d9c1dc8e4652b6dda2528952","first_seen":"2025-10-11T11:47:26.886275Z","last_seen":"2025-10-11T11:47:26.886275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1760182470/73912277_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:14:27 GMT","end":"Tue, 30 Dec 2025 13:13:54 GMT"},"fingerprint":{"sha1":"3D:1B:BA:D6:58:EA:FF:DE:65:20:3B:DB:70:DA:74:CC:19:1A:29:D9","sha256":"19:00:2B:A8:B9:0B:CE:C5:42:0F:12:53:9A:17:DE:76:B0:4C:3C:CC:42:23:1A:B2:75:91:9E:4B:41:D1:EE:00"}}},"request":{"raw":"GET /thumbs/1760182470/73912277_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9612\r\netag: \"98c56e99e402b30e289799faa945f7f2\"\r\nlast-modified: Sat, 11 Oct 2025 11:33:36 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 724\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ce1ed28f2b7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98c56e99e402b30e289799faa945f7f2","sha1":"c9a20c81af9766f4b3f98abaa8f43a500dcd670c","sha256":"f85a3bb4faa10c33640efc9428a91552d6aa71f66c0fd2f9aee5763b0efd1daf","sha512":"127ff71308d3d64e4e8d69de42c4493fd445e10ebbaad91f177d991669a28044328fce6d66c5b6af5dbd37ba64cfcea20e15e00d20431f76d4856639a19a73f1","ssdeep":"192:pLBiaIxXtC8PG+rqvROPStjJdnhKGpTZM6LjQPS1YywaLPZUrMba/W3:pLBiaIxrPlrqvAPStrhKoT1LsPSyywa9","tlshash":"4812bfc8d3b1b36bbbaa34dfe40781c657127de6d12eddd9267619244e8248b20f1e09","first_seen":"2025-10-11T11:47:26.888354Z","last_seen":"2025-10-11T11:47:26.888354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":74,"dns":2,"connect":1,"send":0,"wait":12,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/images/favicon-196x196.png","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/images/favicon-196x196.png HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1531\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wv3ziZccdz0PSH4YPDq0q8qCMKQU0ccb2cy3mknI59IHVD%2B%2BFxcB8JkyRaqBs%2FKNKSBi5zC0gp0F23LeKWRWsusm2sDdc3Z7%2BLUfRMHiwjwPxTQ%3D\"}]}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"favicon-196x196.png\"\r\netag: \"333e8d7f80a6990e0328f4cabf1966b8\"\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\naccept-ranges: bytes\r\nage: 53\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ce1ed38ff70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 4-bit colormap, non-interlaced","md5":"333e8d7f80a6990e0328f4cabf1966b8","sha1":"8a9005d601039a1e8a7cf4f9478e38ff7e02bf30","sha256":"b93ed282a024be0fc339b57246c33912689c75e3c749877a669ea84ed3154ae1","sha512":"52e3d25b99e055838aba6d29e8b686ef38350eaddb2223415d158b221d12a9fa1c29c280c53a5dae33a4cf55822d9f8e390bd1c9b3ec5219a4ad446e1368f309","ssdeep":"","tlshash":"d431f903df68fb7dc3348911b848bc96dbad3faf185db962ce064075b1691700a6f981","first_seen":"2023-06-12T18:36:27Z","last_seen":"2026-03-31T21:52:17.472429Z","times_seen":1192,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/error/banner_click.html","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T11:47:00.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /error/banner_click.html HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vjxxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 11:47:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 21 May 2025 11:07:21 GMT\r\netag: W/\"682db3e9-1de\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 13 Oct 2025 11:47:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9893\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":478,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0e4eeafcbd89612374f3796cdf26cbca","sha1":"0bf9893e3f5f13ba75ca507c9765cd1ad5bcf396","sha256":"8cb500b3776c75555e3ce394dc92d11c06d8bf7e717d8eb2c1c1843fecb8a55f","sha512":"eacadc2d8b668c7efc1ecc243ece50434600a85e2e1ed593150ee1324e16dedc28d8cca82158c4779e7fe9db2172bda20497d1fa44bfe852826cf44f4d533be6","ssdeep":"","tlshash":"f0f05cb281b6a465a194676149c2f019194795e767a1044cb4ce73950fe5b02d4c31ca","first_seen":"2025-07-19T14:14:52.704784Z","last_seen":"2025-10-19T22:37:11.285897Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":50,"dns":3,"connect":19,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026sourceId=CDN_campaign\u0026p1=clickerror","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T11:47:01.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /smartpop/9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026sourceId=CDN_campaign\u0026p1=clickerror HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-length: 0\r\nlocation: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\ncf-ray: 98ce1ecc2fd123eb-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":50,"dns":6,"connect":1,"send":0,"wait":101,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/widgets/AgeVerification/lang/en.json","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/AgeVerification/lang/en.json HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:31:00 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"9ffcdd312529a9b28e65156dd0014fdb\"\r\nage: 184\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3o6Lg8h9z0TKWE2%2BOQbECtaKEVGrfJfc4AXu0Fzj%2FPjP%2B3CrpHw35o9eAhpzBzrMD6yI3lcCSSX8gnt4clcZfkTNFc%2F1UgzREJNwitkLtoOFP8%3D\"}]}\r\ncf-ray: 98ce1ecfefa30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3846,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ffcdd312529a9b28e65156dd0014fdb","sha1":"4133e29495bac1f320ecec0a17f9b9bb8d4f09bb","sha256":"142fe2a082dfe43f2eab11533885dba53ecbad12813475b89aa518424bfc062f","sha512":"4b52fb9f662bb97f2d5ef6d99453b6f417b3ed5f7bafbe073b29be13287515e216589d778468b70f0ae09b853eee91a5ac3ba08ecf6922a19a7bbd1aece9f0ac","ssdeep":"","tlshash":"6e8163af9a4d170246f944803a0ad4e6f75403e0c3dab010565da47a3faeedd133dba9","first_seen":"2023-04-10T07:57:34Z","last_seen":"2026-03-31T21:52:17.512891Z","times_seen":733,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/widgets/SingleSignUpForm/lang/en.json","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/widgets/SingleSignUpForm/lang/en.json HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:30:31 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"78916fd022ef3d6cfc487aad20af0933\"\r\nage: 1616\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GAii1qS2lAxb9ZQxi%2B1avq4irUhxU%2B0eCsX7baQiA8EcEGW%2FDmUNG2sHUFlB1fNix9mnHnDIzaWRdfYW1NoK%2FKerbhz%2BkX7%2BusTwHswN%2BhHQgs%3D\"}]}\r\ncf-ray: 98ce1ecfefa40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78916fd022ef3d6cfc487aad20af0933","sha1":"a0eabb4b5345b41089ff3cf8590182b78dd18895","sha256":"db678a8de7997df751377c84c4bd9e151a6ab2d25ab7fc57ca1f6b27c5d8e929","sha512":"df884fb19a061009e49db12aa3729f9ff4c71dd0280ac8ebb43a7bacd4a59b36d155609e9740371e3dc8406e76183db767853d0ae8a47d4ecd4b51fe6fa3fad3","ssdeep":"","tlshash":"c121be380a457cc20cc254267966cc33b5c29dab8a51b1086b62906b23fef2f75bb05d","first_seen":"2023-05-07T08:12:47Z","last_seen":"2026-03-31T21:52:17.601614Z","times_seen":522,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/images/logo.svg","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/images/logo.svg HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"f256810f45872537d8f56066f2568dcd\"\r\nage: 3272\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9t1TIKhv1DVHHgDqj%2BczlPQ95QI4JbBaywjOpC5%2BIzcLoJ%2FDCPGcTsNYB8JXSVNBTAN4jfAxrKwhazQ3eE00%2BYee1W%2FeMbSivPdzVANDfB3eVgk%3D\"}]}\r\ncf-ray: 98ce1ed15fcf0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f256810f45872537d8f56066f2568dcd","sha1":"d28e722a54d7a4b06364f161c5b255301ec29e89","sha256":"54d39b4f66fbe6cce470e791c17c3e38f015b046a55e3ff22cb22cdb741879bb","sha512":"5c73ce4d2eee81268871994bd0a9b5d5424757661a40a0911772b4f7dc784cdaec92b0fc37f137c6a4776e19e6a787b55bf151306379b0b00dc366261cf07fbd","ssdeep":"96:zioEo1FkPeTp3PVlZU5Pe3LkaJRRiBwvnm7vXxEBcEeCYw92ZUslVk:mno1FkPe1zZC0LkoGwGXxucEeUViVk","tlshash":"1ca196d95720a2cc24ccc84fff769aac691becbb7ab585c0819e8f58549bdc4f504c00","first_seen":"2023-05-17T22:36:59Z","last_seen":"2026-03-31T21:52:17.577016Z","times_seen":717,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"77.93.81.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:02.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 14:45:10 GMT","end":"Mon, 24 Nov 2025 14:45:09 GMT"},"fingerprint":{"sha1":"0B:C6:65:C7:CA:31:38:2F:34:DD:CB:1F:43:13:27:0E:01:37:59:79","sha256":"E4:4F:62:8E:F6:87:39:9F:35:E0:6B:45:78:93:0E:B4:8B:F9:D4:0E:40:91:DB:AB:48:8D:B0:4C:C7:B5:A8:D8"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.blcdog.com/\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.blcdog.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Sat, 11 Oct 2025 11:47:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-03T17:48:25.473542Z","times_seen":7500,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":48,"dns":3,"connect":17,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjxxx.com/check-check-bots?url=https://pxl-eu.rtb.tsyndicate.com/do2/direct?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYYIGvQyAFjRosZZHKQaUFDzJgcLXKUiTGmBRkaNcKUkSFmhhgZIkU4HONGoY4YJHE4DFNnDEYbNWLIoCFDKg4YNkrKmIHjRkmhIsSkIfM06tSqMq5mnbG169elZOwsnFpDRg4bDuHUETNxqg28D-Fc1DHjBg4ZDUXMgSNRB43CM3BSFFEGD50vixuLqBEVR4wbNsCOaTM4hukcURMbNLMwsRg3bhba-GyDLeA2bjw6xkoyL27dN2JgheGwTgyMaOhYnKPjxYs70F2cefPmDJsyLsa8afNiTkE5Y9D8iNNjTho6deasOBOmTZrcK1q0QBFGjpo6bsLcdVOGTvbtKXBRB0gy2PAGeeahpx577sEnH3324aefDfz5p10bAQ4IQ4FnzPEFG2PIAUcPRZyhhRphIKGEHWJcUUUeQpxxRhBFFFFFFk-QkYQQQ1CRBAxNEBGFHmGoIUQcTthwxhBFiBHEEEGYUYQRU8xRxRpTMPEEDk24gQUeQlQhhxFKFJGGHnYQoUQMAhJowxhspFGGG3T00MYcLYThBhlyvDFWC3O0Nwd-ZwA6R5sb2jDHG3WAV8ZYPYTXZxtltNDGG2Jdh2iBcvZQBRVGtIADWGRsh5EdauCh6n9tiFafbCANFUZjW8wQQxd5gbcQDC6AVNJQcLTxBRy66sBrDDU4JIcdg9VAHGVjBLurCzMUV0caGMlgBgxmjHFYDaKWQQMNLdTg2Uo4jEGDDTZtZUYYMJQhRg1kXAVWGoOJMIMNLoDmggxYuRADDjmAVUcYGDXxhh5psMFGGC_U0CsIKDDxXh147ABCEHv2ORYIUmncBMDCrZnDFEeAIMS1bJDxwhRLRBHDv6YBLEOvMMSQwsaCXXeFvEucF3Fh1NpA8RJIUNEEEyyAEOcaZYBwRBljrPHGzlYgZN4bbrxAw8RDoDFpGS_EQAOvvN4wwww5_AvDDSAonGnUU4TxrhxpDH1D0aI5pYMISRAB1htyfDGG34AL7hCIGAVOahl2fCFHGWxMlFUOOOUA8LMHRU6s5c_KcUZsR42klAidfyGGHHMBlvqlZDmGLFIO8flG6zI49IZRj-nuoR0ILbTu2bVDPlGub-CRx_Go50E6HXLUUYZDcyyLUZ90zEp4C_idV-7MZIxxw-DVy3WUXzdshZXriB_0RfjjV9TqUaDlfANoW8kvw0T1f4Y_V1yBi-TKsJgvzIp_WfGfDfJHmciF4TpyoINRalUDXD1EDJo5yLvqwAaJ5IVxxhqKbp4VnoW4gYNs6IMCAgI=\u0026s=4420824d34ef92b290f1d0165a2631552d97d939176c5dca49ed24512ff149f81760177623","fqdn":"vjxxx.com","domain":"vjxxx.com","tld":"com"},"ip":{"addr":"109.206.161.36","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T11:47:00.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vjxxx.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 03:03:36 GMT","end":"Sat, 22 Nov 2025 03:03:35 GMT"},"fingerprint":{"sha1":"B7:58:88:3E:88:E8:0E:8F:50:D7:21:81:FD:A7:E4:DF:D5:FB:85:EE","sha256":"1B:DD:90:7B:BF:E8:17:F5:F0:0A:31:AA:4E:1C:5E:63:B1:97:38:72:0D:E7:C2:0B:0B:3E:CD:3D:6B:AC:27:4D"}}},"request":{"raw":"GET /check-check-bots?url=https://pxl-eu.rtb.tsyndicate.com/do2/direct?c=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYYIGvQyAFjRosZZHKQaUFDzJgcLXKUiTGmBRkaNcKUkSFmhhgZIkU4HONGoY4YJHE4DFNnDEYbNWLIoCFDKg4YNkrKmIHjRkmhIsSkIfM06tSqMq5mnbG169elZOwsnFpDRg4bDuHUETNxqg28D-Fc1DHjBg4ZDUXMgSNRB43CM3BSFFEGD50vixuLqBEVR4wbNsCOaTM4hukcURMbNLMwsRg3bhba-GyDLeA2bjw6xkoyL27dN2JgheGwTgyMaOhYnKPjxYs70F2cefPmDJsyLsa8afNiTkE5Y9D8iNNjTho6deasOBOmTZrcK1q0QBFGjpo6bsLcdVOGTvbtKXBRB0gy2PAGeeahpx577sEnH3324aefDfz5p10bAQ4IQ4FnzPEFG2PIAUcPRZyhhRphIKGEHWJcUUUeQpxxRhBFFFFFFk-QkYQQQ1CRBAxNEBGFHmGoIUQcTthwxhBFiBHEEEGYUYQRU8xRxRpTMPEEDk24gQUeQlQhhxFKFJGGHnYQoUQMAhJowxhspFGGG3T00MYcLYThBhlyvDFWC3O0Nwd-ZwA6R5sb2jDHG3WAV8ZYPYTXZxtltNDGG2Jdh2iBcvZQBRVGtIADWGRsh5EdauCh6n9tiFafbCANFUZjW8wQQxd5gbcQDC6AVNJQcLTxBRy66sBrDDU4JIcdg9VAHGVjBLurCzMUV0caGMlgBgxmjHFYDaKWQQMNLdTg2Uo4jEGDDTZtZUYYMJQhRg1kXAVWGoOJMIMNLoDmggxYuRADDjmAVUcYGDXxhh5psMFGGC_U0CsIKDDxXh147ABCEHv2ORYIUmncBMDCrZnDFEeAIMS1bJDxwhRLRBHDv6YBLEOvMMSQwsaCXXeFvEucF3Fh1NpA8RJIUNEEEyyAEOcaZYBwRBljrPHGzlYgZN4bbrxAw8RDoDFpGS_EQAOvvN4wwww5_AvDDSAonGnUU4TxrhxpDH1D0aI5pYMISRAB1htyfDGG34AL7hCIGAVOahl2fCFHGWxMlFUOOOUA8LMHRU6s5c_KcUZsR42klAidfyGGHHMBlvqlZDmGLFIO8flG6zI49IZRj-nuoR0ILbTu2bVDPlGub-CRx_Go50E6HXLUUYZDcyyLUZ90zEp4C_idV-7MZIxxw-DVy3WUXzdshZXriB_0RfjjV9TqUaDlfANoW8kvw0T1f4Y_V1yBi-TKsJgvzIp_WfGfDfJHmciF4TpyoINRalUDXD1EDJo5yLvqwAaJ5IVxxhqKbp4VnoW4gYNs6IMCAgI=\u0026s=4420824d34ef92b290f1d0165a2631552d97d939176c5dca49ed24512ff149f81760177623 HTTP/1.1\r\nHost: vjxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.0\r\ndate: Sat, 11 Oct 2025 11:47:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 28 Aug 2024 14:24:00 GMT\r\netag: W/\"66cf3300-2d0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":720,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"cb712711859e92da4f39e95d5e349595","sha1":"e4b3811fe9ace3580979751ebf252315f95e37fd","sha256":"a08453afea1019587928f7bbb43d3851ddfafd34cd9d7ab491c52a6a001c20d5","sha512":"ece180b1645de6f1c4b667aa4dc8912ef1cb2ce96e8bc0c653e535e5c6d8f5c2da227a6c1334747e942117d2d34b0f388d33985ed95c16951540e0884741c372","ssdeep":"","tlshash":"39017dc704e351c5136742290eeef2095585204369c4cc00788de3665f99f55c9e7ea8","first_seen":"2024-08-29T18:09:44.343502Z","last_seen":"2026-04-03T18:30:23.363313Z","times_seen":160,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":64,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.blcdog.com/static/a7bbed3a/s/LPAkira/main.af38ec74c5dc02f692fc.css","fqdn":"creative.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"104.21.48.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:28:49 GMT","end":"Wed, 19 Nov 2025 19:26:28 GMT"},"fingerprint":{"sha1":"A1:B1:ED:5C:F3:76:3C:43:FA:E7:DE:D4:70:70:1E:18:FE:BD:2B:02","sha256":"F7:84:6F:CB:27:F6:3A:68:EF:4A:E7:1C:55:1B:4D:F0:97:D5:9F:61:8A:A9:C7:78:8A:16:BB:A1:10:FD:23:DA"}}},"request":{"raw":"GET /static/a7bbed3a/s/LPAkira/main.af38ec74c5dc02f692fc.css HTTP/1.1\r\nHost: creative.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 11:47:01 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.af38ec74c5dc02f692fc.css\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 12:30:59 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\netag: W/\"0ad23e4d1f88ce63d8f4e8abd76dc285\"\r\nage: 2907\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gW7dmYb491AGXw9Zoe7TIcQCkveYU8P9tzIsFZFKo6O564Rn9I02g6GPeDXEV6p9ApV8A8DwsAWKHhc8JVVtjEZnWrc23nExxiAIeBCIG8oKyOA%3D\"}]}\r\ncf-ray: 98ce1ece8f770883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0ad23e4d1f88ce63d8f4e8abd76dc285","sha1":"9608e2b0618701fdaaff3ed1c241b38b5281a50f","sha256":"6b7751456083391915d4c55a8afa74ab198d782a4cdbd96a2ed70156da5d16c6","sha512":"6c29b6c64a7ffb92ab19e122dbdf0a6f17282ae2abec2bda06dbf17d8bd9ccc8afc9eee3d2fb9b663baff671281e4543e16ae9d4a0aa62fe80a0d7f2c6f6263c","ssdeep":"1536:OKu+hmcfYSkeSrJnHgwQP0+52sCY0h7dJkPnPFnAhhJNm80Ydv3/6tP455RlyEMa:OKu+hmcfYSkeSrJnHgwQP0+52sCY0h7N","tlshash":"1a63e7b6b1503119381bcea6b2c4ad675a3dd463f6160ffe70b264ed87c768e1322247","first_seen":"2025-09-23T11:52:37.061365Z","last_seen":"2025-11-04T07:30:11.900583Z","times_seen":87,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"creative.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.blcdog.com/LPAkira?action=sbSignupWithModel\u0026autoplay=allInFocus\u0026autoplayForce=1\u0026campaignId=9e8d68529d60b2986ad8fa0ac57409f5081b0b095f0ab5190f8e3f8fb46076cd\u0026campaignType=smartpop\u0026creativeId=50afd6f93c1098792a50bf0e8cb9ce0f5ae8686f00b07a0e5562ea7f26887865\u0026iterationId=1081157\u0026masterSmartpopId=1603\u0026p1=clickerror\u0026ruleId=374\u0026smartpopId=1550\u0026sourceId=CDN_campaign\u0026trafficType=popunder\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026variationId=34765","date":"2025-10-11T11:47:01.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.blcdog.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Oct 2025 17:55:42 GMT\r\nexpires: Tue, 06 Oct 2026 17:55:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 409879\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-03T17:48:25.450854Z","times_seen":6244,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":92,"dns":2,"connect":27,"send":0,"wait":28,"receive":9,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}