{"report_id":"4eaa1139-265a-4ff7-8a69-d1d4f1d19a81","version":6,"status":"done","tags":[],"date":"2026-03-18T10:51:48Z","url":{"schema":"http","addr":"blockdagcoin.xyz","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"blockdagcoin.xyz/","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"title":"Become a Part Of BlockDAG Network | Buy BDAG Coins \u0026 Miners","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"blockdagcoin.xyz","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T10:51:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"blockdagcoin.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-10","domain_rank":0,"first_seen":"2026-03-18T10:51:50.020076Z","last_seen":"2026-03-18T10:51:50.020076Z","alert_count":102,"request_count":51,"received_data":9702459,"sent_data":22993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blockdagcoin.xyz/d6dc7b79-5c70-4da7-9aa7-1257a4622bdf","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-22T10:58:35.558319Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98ff820ba9051d1e17688e8809dc7ced","sha1":"43578a081ec33d97a98020fb87d45ceb4455262e","sha256":"4b78ca661406fa831afaf2f33fd9e3734c8a8a3b38c644b9830c48c7fce4add1","sha512":"76811fe923298f79fd802d2c37668e3abe510bf8ba0afa537b0ff3d81014820b1707b54ad6261b50d79599867884ed73bfb1bfcfea6fbcaf32a7e91cab2ddd1d","ssdeep":"","tlshash":"2fd012597074a97a148e797e4ccf08ce7e269412a2084dc999dcd8547fb1e6d42e488c","size":196,"data":"","first_seen":"2025-05-14T10:30:21.264279Z","last_seen":"2026-06-09T00:29:57.046508Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-23T10:06:51.933205Z","times_seen":3222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/zoom-2.2.7.min.js","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc942e7188d1ffa35ba420209ae7f7b1","sha1":"7ae97a485cd4d49143f972228864b81005411c6b","sha256":"b60caed9c7bd1d2e3f5dc767d5d322af0ee6852c6f439a7f8315c815f281ab64","sha512":"179be5aca4511439297c2ac81a9c5e2f9574846fdb5c1c3a381e7a2e41ed40d9a976be154ee443ff255b95176865b205dcbf20d8df5411aaccfd0495e15be024","ssdeep":"768:jdMcEcNSeFGElQay75NWoZprO4Nv0HD2lcilS66RcleL4cbMT9KGvz/vdXGc7Rrk:YecE4QCpxv0H64NxlN","tlshash":"145372d81606d4da8e5218eee8b3e009e0645e53cd6cf267967dedc0b56df22c08727b","size":66640,"data":"","first_seen":"2026-02-16T13:46:23.130966Z","last_seen":"2026-03-18T11:31:40.690317Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blockdagcoin.xyz/27b13e18a048bf0d.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /27b13e18a048bf0d.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-f796\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQmXMBmzpDSGGGy3bgTwp%2FuOhp1BMQAC7T4%2BjkZRPky0sUZD5ey6Vn4MCW3WLIorwK%2Fn7ouJJKYdwaib6IORcPVyKAepR9EKWqx%2BqSlwSZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91deb827f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63382,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63382), with no line terminators","md5":"9dd559e0a046f13c7983c68dc6edf199","sha1":"1142e75a5f4548b2c0c653f2c1eaf98f43add0b9","sha256":"d73b8083ba1973c36a706c479323bd132eef5c09130fdb7a8674992290303e0a","sha512":"a62d47f8c83b48cdf219205cc36d4f28be30432887badd341fd96af016482c338d709e3b241951e6b8e68754310ed047c753bffb50811bf91204b8be84dbb023","ssdeep":"1536:q5/Ca/2+j78huyPhg4XGZqOV6ZLiOftUJ:q5//9","tlshash":"1f5385f612f9ea3de91be4455b8cd94c4425b4008f6b5ae4a833537a40c63f23eb61bd","first_seen":"2026-02-16T13:46:23.138414Z","last_seen":"2026-06-21T01:46:01.945654Z","times_seen":55,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/d5f31c420fd240b4.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /d5f31c420fd240b4.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-3fea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt8WzxIb94oaCgWRnadukiy6dasJyWciJ9A2pGNYN0BlXSeYZdLG2udm0zS72CSI5YAEY6WaPpxMzWQPlU84F%2BPUX1%2BcpMn49vnwhLhkt4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91dec227f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16362,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16362), with no line terminators","md5":"cdd2c10a7ea2ccee2c63163aa5298f93","sha1":"831df3339e785e38896ddc3e7891e91d25852a05","sha256":"6e26d32ce052e7d3d70fa8bd8189e8a64ec7087c4887e79042d5ee67b9618384","sha512":"46fd29763c689069e5b5d178c2b35a4d86a17316de9d23f14183c1519f7b894e33a30f5c816598065165fe2fa9a9da6cb24eef5e1bde79870486d7302d1ff45a","ssdeep":"384:krP8wZUyHBs8a4ISwnWOQ6T8TWUTo0rOPBI6l/:GlOyHBs8aqwnWx6oztrOB/","tlshash":"e37222b1d2e9d5bcda5bf298115cac4d5569b086cf1b46e0ba33657e00ce3b138982fc","first_seen":"2026-02-16T13:46:23.160297Z","last_seen":"2026-06-21T01:46:01.954377Z","times_seen":54,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/9e420e0f82b4f3a5.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /9e420e0f82b4f3a5.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-4dac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jl856fixjB%2FFlJwIFSohSj8Xu5p5AWNYausiiSy6klnr%2FItlE84Esn6CxYQH6sdrc4mbtBTTxrfycrqydhyczBsyOMM6H8POds4%2BNPiZIzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eed127f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19884), with no line terminators","md5":"306136b43c9f3b0bf21e5b96befd8421","sha1":"9dd07bd43ac3f3d1c98b73dfcd80ef949cc6ab91","sha256":"b5d4ed0dd17544912d00f7dda53c5bb7dc286aad9ab8b7b932d057aaf1a7b81f","sha512":"a6d94682dde5e09773c1d9070d83cec84ca5dbbf4a926706b10391032aca1b4bd17aebb32eaace01971f6fc08c9e5519ecd80dd5309ba3503e38acd419121e60","ssdeep":"384:zK9hgjVvfKtKj38spRQFrOG723VrhrS0AcfP3:Bt3L6Ujr3","tlshash":"b392a96d31bc9428ec57bc172f48a85e13266471192bb193fd6910ab4cc3bf52ed227e","first_seen":"2026-02-16T13:46:23.161227Z","last_seen":"2026-06-21T01:46:01.955444Z","times_seen":56,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/b667654fec6019f2.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /b667654fec6019f2.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-5734\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZCrgAGsrMxwTc0IF85D9AHSV%2B1%2FPss9FUBgutukAHJfDqvU2naVx9LuBB1vHMApd8lxncvZgfd6uu0kQSnZmqqJ4F6mW5SxjsxLW%2FCds9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eed327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22324,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22324), with no line terminators","md5":"8e1aeb21e071ef45b2eaf77692606e2b","sha1":"f3a8060971523a19f252ed703ed75b9a48d758c9","sha256":"bd4a1247395355775318501bc2661569de6008e1ce697b8ec34f374d484be857","sha512":"92878550e677ca7914693242e94a0f220c97a44a9f07c990b311e284fa912e97dfa332ebb70d4db693009defe153044f00588c3eb553be8d153613c8f1258f66","ssdeep":"192:ka8r6hlzK9lAXBuXMpHPRo6q67Ld2uwnAvT/FnlT3kOHEt:k56hlzK9lAXBuXWHq6qk5ZLTkt","tlshash":"70a27c5d78543336d84ff005befac50d40bee882bd2158a57a01a13b8be13ef58976b9","first_seen":"2026-02-16T13:46:23.127926Z","last_seen":"2026-06-21T01:46:01.957934Z","times_seen":56,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-9.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-9.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPfIg2DIQGPSekLcOo17IcW1jsJNp2cc%2B4iAIGcXdw9J5vSub7MN58CzZS5XaLqyiEG5bJVs3HVN2vAX2wBqEfDQFh0QBXy2Vq4UvWS%2Bmh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eed527f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/check.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /check.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 95\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-5f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eNhRTfllpBmfdEDi9DG8tIwEipcSoWBIN2b5fIS%2FRxcYV5ulss841Ez1o4nxTzyOYQJyhKaPsY7fVp0ZnIRm1wyuMtwUHhxOO9XGRARXAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eed627f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 1-bit colormap, non-interlaced","md5":"71a50dbba44c78128b221b7df7bb51f1","sha1":"0ec63b140374ba704a58fa0c743cb357683313dd","sha256":"3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517","sha512":"6ad523f5b65487369d305613366b9f68dcdeee225291766e3b25faf45439ca069f614030c08ca54c714fdbf7a944fac489b1515a8bf9e0d3191e1bcbbfe6a9df","ssdeep":"","tlshash":"fdb012e323704c36d1014173523c92138b22c31ca14d19438001fc280c63305ccc879a","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-07-23T18:58:20.847669Z","times_seen":21979,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/13971731025ec697-s.p.woff2","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu%2Ft3dSt2kS739doFwhF20D0RfsNMzTaft5td4C8Gm8A4tlAMx1AHcbxrksbdxHeF7%2FCWF1ke3CS2BoGlfY%2BrLHR3ekOYQXwJptJQ2kVod0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae946c3c27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-23T22:26:39.885902Z","times_seen":6043,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/btc.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /btc.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6R9QBKBQqYow8zw9XcKx1o6BYG6b%2BETXs31xGufdg%2FGUAOSXRjY4PYSD72Ld7dnVCY6yaKQQngo5VgW1xivIlOP0O9PbyF3Zv2RVKpAVKA%3D\"}]}\r\netag: W/\"69b0427b-5fa\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd1827f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"443f8915322c362589d0d5c3fda8e578","sha1":"76efb7fa20ca7827bbfb2c2a545d426e3d207c8e","sha256":"eac022ee80c36478da9da3574d61a7a812ff0b303ffa59cd2e9b16f1020cf0f2","sha512":"d4e5c555eab5c31727e568cc6f56f332c85e82ea1dda407317cfd0db36da9acb941a39a5ae8e31bb50e0c250d91c9a8ef3ccc75cc61061255d7a414ee23007dc","ssdeep":"","tlshash":"093142d1f3cc21f09b07eb61c90ac176355b28fa7badc34947504f85b9670ca948c9c0","first_seen":"2025-06-19T20:11:15.843006Z","last_seen":"2026-06-21T01:46:01.960241Z","times_seen":71,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIrX8v3cif13ehEPNw30t8v7SPwZDFaBdk69GHothtcN39Jz%2FDnAqbV3aKZC03vpmU3h7I%2FdRCOpVzHts%2FSs2UrlwXfLeLAdBzpSbAf5pQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eed427f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-2.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-2.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBRlmwj4QZjnBeeMy8NDH%2FMBKkBvIl%2F3A9L1qD0Pau62yQZakG6v7A8jByk2Y%2B335Jkdcthzrnrn2y8MtT%2FZFWspRasG4kEBmtuEjZ2qhBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eeee27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-3.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-3.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S5oiUrYgw6wH1qilKv0VZ4ZKPZ2W3w15Wjj8wd%2BBZFlCLTA33%2FmoxuLoOAQJZUyqamuzpWqVGhro8fRHl2%2FzKIKJal1VptkoYqmuGJ6fOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eef127f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/6ca6224f9376cc31-s.p.woff2","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /6ca6224f9376cc31-s.p.woff2 HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45388\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-b14c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi4R6eQV4p4szyI6K%2FHf0TIGmspnM5Ruq%2BVqPBTqOlVQaHmuEy3R4yGS2eM0NIP%2Frh30cXhxXKJWVlNOFFpOH56SKWl4X2R1Rw1SN3c7QX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae945c0b27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"2106084f5b102e873ea725173ca8d8d7","sha1":"e4392b8344edc97744d12f9b2e6009f47fa2f19f","sha256":"8b44488a5ebc1871afc2de2427fceb60f8a5be75fbdc7e666b3386fdb0e280e0","sha512":"198f36a883ae293f7f2c97bf0f9ba84ea3c1628e98933d191deb9e358bcd2b18b82176a07d4f56882e72315aee14f5757bb0d522d555e45d9242d41f0a1b80bb","ssdeep":"768:QVvZ9kCZGF/pSpg+0EhCH5wZolZ+curQgOK1V+MvTTGL1Lq:GvZ9jGF/9ch45wClNudsMv/GA","tlshash":"ca13f12ba138a894e1e17d7776a999211da143e3f35e364f0b74f3806aadd284d19c34","first_seen":"2025-02-26T13:37:41.74679Z","last_seen":"2026-07-18T16:06:57.570714Z","times_seen":133,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/earning.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /earning.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3b1i5ayzirSFZ9dLPJBrHRYK8GIq4zNBrtCuUCbevY%2BDQxGxWbwwRGkPEVAxB7hAsjt4oNTrk%2F4Q6QTR6HWJacyrtUUbn0wPwt6fmS8HY%2FY%3D\"}]}\r\netag: W/\"69b0427b-219\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94bd1527f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74ab830b246748644bb8b24409066f57","sha1":"9797116461725d18b31bcf60181484bb1e9cd342","sha256":"c9c8b4682addebad8095c793e2cfae3ec3f55d0155bcc6e58ffdbab9065c7d87","sha512":"efb295acebcdbecf0971499a8ec676ab974cb528d02bae484b799ed16939d3570db955dd6ea10b6a9051e2c0808221af26adbeed1a097813381711044efed3b0","ssdeep":"","tlshash":"eaf020d9d248dde89103c710d50cf7f0423390b23e088c4ac42b1e60d4141bfb514868","first_seen":"2024-08-22T17:20:23.999224Z","last_seen":"2026-06-21T01:46:01.926754Z","times_seen":60,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/usdtbsc.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /usdtbsc.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJKNjbPTtdqMeiUxlGCG7Ko3MCpLLtesh3eIQ0vB5lc6vCaWQuZISkxj2KRIM7GExF7I35AVyBNf2QM3DX%2FQ9Vjk%2F025O23YYUqL94cHnds%3D\"}]}\r\netag: W/\"69b0427b-6e3\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd2027f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfe8a941a7014c275759ef81a105b46c","sha1":"c8e38603f86edc0a102f24162c6c43269ea46be5","sha256":"e4e152b06b6af73862137d8bc3a222f1b7b6c37f1f6c6f021cdf06fe27daca78","sha512":"518e33025394f4ba3d16e9156771c40119307eece0c8bd488336fcca435ed61b01e7756b895b247956096f4e302478e6105d61ef9db8bfb9efb66b7c19911e0a","ssdeep":"","tlshash":"0d3161d1a31d22b9e140eb7c87136438383704eb7901d0de8ef10a6ae04c09e0c6b9eb","first_seen":"2025-06-19T20:11:15.772563Z","last_seen":"2026-06-21T01:46:01.942078Z","times_seen":60,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/verified.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /verified.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 13601\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-3521\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BgfiKpfsMOw0WvLO%2BxfEAs0TyglHqTP5piDPM2E272ANjBoDodMDDIhaF%2FLFm3MYyb6wBwDY918cehIq7aZm3Nbg5fsyNAFop2G0aksxTE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae94cd4727f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e78cfcbaf6ca3f2ab16284671ccf2d02","sha1":"d8824c694e6f13b16649ed258ede5f6ddc12cc5b","sha256":"10f6203b108de79b8cb1f91ace623d6eb360dc2c3f3d9ff8e1ce19d0f2293aae","sha512":"d4fa92b430cc3d6197c250b9712ce54c7029b7f653361ef653673f879d5be64cc1c5c8fa174d89c1fbd4333fbf3fae4fb34d22f448db1f3eab4ae3a9332d878b","ssdeep":"384:NdTAZOA6SRtEdkJAid/+ApaPHBJZsZzC0HCwNqDjcpz:/TZSukGw7aPdCzjNqXcpz","tlshash":"d552c03bed625ec7f67cb5339c5625c4a8ec0f8887220dde745a7446b023d255ac48ea","first_seen":"2024-04-15T06:32:58Z","last_seen":"2026-06-24T19:11:13.059099Z","times_seen":94,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/icon.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhccaSRAYzdvEhYh2R6FfLbA%2BA57JOOHWK5cM8sBEUk1daq1fHEyx39CHY3QNtGqnDekPoeg1Ic2k%2Bo5fG53nSe1fGEKC0GsAq5I7NU%2B24E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae975abf27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-10.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-10.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0j%2Fg3h3ws2wcSsrJzT5aQoLCGvzyJe%2BmG0PZtHv68BSQ52sEcYYmEM%2FEIBPBcFFBJhfUBuhmFQxC7xlNf%2F3IvtBmNvXIuUNUn8PmyKRsLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eedc27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-4.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-4.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua1eQciWPRFGEJgRnkjPCPg9oJfbuYtoUWtp2PXjqlyV%2Fcxz9YjAEyLxOys5HL%2Fq7i0091YqHn8luHkw1TOGMMosPHmzYUjKT5QoMdnI9gA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eeec27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-8.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-8.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPmXAWmI4upILBMhi24Q%2FeSQIWmg4rGecBmZ4oRtIsV2NssaQM5ovnqIstuomeEO3zZh795ce5pWmOigfsC5peCybmjla2G8%2F5znXM%2BdlBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91fefc27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/wallet.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /wallet.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps3TJw9p19ljCGBqGWXcOpqOne3rIlm5O05Jdx%2FCsz%2BpW%2BbhLp09nuE6SEFOoClXPNlm3Rghe2mSTVTTHRK60hho6btMbQ9hdC0Az5ODviA%3D\"}]}\r\netag: W/\"69b0427b-509\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94bd1327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cc505962f0bf6284d2c001cf6c098f8","sha1":"6c66ebf2ee6273d45ae9942addabf6f95dc3bb6b","sha256":"1a6901c1a76f45513fc5c124c384adda6ac726f3b57fdd3dfebf9d2382447f35","sha512":"0c216c9a83574f29eeea9e8cfc0e21ac5132fc5dd592655f8ff2242c320fb03cc37854a2b9fcd2061b48209e15752b1d72644d23e46cf761bc2aa72fa1d91009","ssdeep":"","tlshash":"5c2157f7a3d595e4d18617d7ff22323d2a95e1b30f14d21a8579a8e0b686d8c48dd880","first_seen":"2025-06-19T20:11:15.768122Z","last_seen":"2026-06-21T01:46:01.926144Z","times_seen":58,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/shib.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /shib.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxdOGvmO0xBRoFy0vVkIaJ4M3%2BaHl78TPGcuhw8tT5wA5ka0d4LNC5sTFjZ9ipn5B8VtMYV1MuZ2BXuxCkpPbqo1Zz8eIuWGJZc4zouDqU0%3D\"}]}\r\netag: W/\"69b0427b-2fb7\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd3d27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a22645ee1822f19e9cef05ef9af74927","sha1":"e45c55f9646b7cec9ff20c01f36e74b7c111250b","sha256":"5a834047bdb47d95d7d30ba8322410703ef55c649249a8b4a797f8ae02a4f85b","sha512":"0bfd197b7026df5322e7675a46fadae0d39475cb129be5f20052ffc67c3c8251a17404ed6a8706f9a8d8a1651140f55b140bbcfb4be3af4e87fcfb7f064da7d0","ssdeep":"192:sGOKImimkNawvz2l87RFVLVejVqSqgNWusgxjVHbcyjLSdN38I7qccz1:sTljhXvz2lG1Uj8SqggusWjZoy3Sdt8D","tlshash":"28422ee7e7c8b1e4b403e3a49422947475ab38fe7b26cf854340efd4b712199888ec94","first_seen":"2024-08-22T17:20:24.030635Z","last_seen":"2026-06-21T01:46:01.917347Z","times_seen":62,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/7090b15a35459fb7.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /7090b15a35459fb7.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-1726\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05C4PawGFb1tBiSC47e0MsVcSTfXCXlAMVqe%2FKbcrMmsISf9tUlce8bIQgr5AnZhNirIX1x3lHkuYbB9eSS8buC0DI6%2BJzA1XMi2RUIQfpE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91deb027f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5926), with no line terminators","md5":"4947a37aa6ce89d3f26a7896af57f94b","sha1":"bf07d0b9be5cc7c0ba96e9a3815a35c9b87f62ae","sha256":"1a1365a2642a503bbd5e6f11ac4c1e6608816b6656b11925499281d84aad8923","sha512":"818aa5a6505457bbe5c37cd425fb3fdc7da8f510d352c2835b4987977b7538b8caec22afeb133aca06f215050ac7349746f1c599a102581676fce477dc89abf5","ssdeep":"48:BLYbHPtzqVwipFUhuPXHUPgvPA6EdZYYTY/6NUxEMQUnVX/2WNCXPT1EGGC8PFMR:BaV+Vw9kP0Ivj3NnCZZiaYZXFmFoX4","tlshash":"33c1efa9022da42ddc5760a19e4ea25c616cb0096b07dfccbd36731f1ce52b31de857d","first_seen":"2026-02-16T13:46:23.152029Z","last_seen":"2026-06-21T01:46:01.944373Z","times_seen":56,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/2f40c3ca97d9220a.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /2f40c3ca97d9220a.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-18624\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xb8kgI6yheLKOROePdUW5XkF%2F2eM4EmkGFQWpTbY7ibH6zAViC9m2iFaqIxrYsq5vrIEvENQtBooR9Ru5PA445ojvgHd01MyHkmat%2FYdSAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91deb227f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceafc4545c326c879c8ddc29a82c45cc","sha1":"f8500017de6c63f669c06b605951ee9d81201c2f","sha256":"457a7a40a94d05f48b90bfca50b8f1b1f0f099be60ef626337754a5544bf37f2","sha512":"2c1fd3806ce13eb36de057b8bc044f154d0dfcec4bf15dfc3184161958bb125390dfff8875199ba96ea7493cd42cd3a39a2f17b7d3a22092b8f6d58596484d64","ssdeep":"768:eRtnoy8JbDCh4h3BC1heYa51obS4JuZ3s7no3SClgNnQN:eRt5gPvH54Y3ko32C","tlshash":"faa365b892bce53dec5bb50a2f4ce4dc1328a0018e275de5e672913b45c26f23d9653e","first_seen":"2026-02-16T13:46:23.159259Z","last_seen":"2026-06-21T01:46:01.952319Z","times_seen":53,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/4cabe27118829ebf.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /4cabe27118829ebf.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-c99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MG4g2Wl4Dr9Od2YIdOKnWjziyn4tZ2LLyvZwdrvFBYUjUetxhazE2NQGdFb%2BqBw%2B%2F%2BU8t6LGwDr25qq1v%2BqkoOee4g3XSboLRgmlBA%2BFcJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91debe27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3225), with no line terminators","md5":"8c184aadf1382f65dabea790c2d85f40","sha1":"08fbe76f3e09aa1c2fb361df601e683b4c02f7b5","sha256":"7e458b69ccadf6988629f686349201baf545b46e8e7429e60b8575682e211ce5","sha512":"10eba7357d486d4b0c97ee1e7d7592b03df0f17cab557e5121975b17ac293e4b6715cbb10da1ca8965bce2e539f2145af09d0ef71597673b1150c6624ee10b5f","ssdeep":"","tlshash":"4761bdbefb2047bbe9377626bfdc814bd24dd8581f3ac54224a013841ac25e14f50bae","first_seen":"2025-06-22T15:06:13.546395Z","last_seen":"2026-07-23T03:59:47.864057Z","times_seen":77,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-5.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-5.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqcVU9a0mzDtTingFlYS8mNjBsJHj%2BJarEcb8263JkhVSLZbpN8YpIvsx0fZ9iNT2gdxEK2JeqUvEGC9Ynn0HuRtB6ZHiQ0WMq8x4r%2BuPxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eef227f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-6.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-6.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSAyCFlz1KfBMdbM2Jckqh60LpXjUtC6AWN4FZw6%2FeI5QIESGqCyKSLJYw4fh2Cj%2FV3AOKgU0KirsPuoEgc4u3zY2ETaEF0BTKDRBRVqUKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91fefb27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/zoom-2.2.7.min.js","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /zoom-2.2.7.min.js HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-10450\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 123551\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dG1nmLdXU5qg3pKYVE1K1f9DO7VBw%2BpGLUnwWbspYtBgG8aYwJIW5lYe3A5OWOj9Bh8UO35VKD62mFJ7IyKaM987OQb1OAjXUxO37WW9G9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91ff0527f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc942e7188d1ffa35ba420209ae7f7b1","sha1":"7ae97a485cd4d49143f972228864b81005411c6b","sha256":"b60caed9c7bd1d2e3f5dc767d5d322af0ee6852c6f439a7f8315c815f281ab64","sha512":"179be5aca4511439297c2ac81a9c5e2f9574846fdb5c1c3a381e7a2e41ed40d9a976be154ee443ff255b95176865b205dcbf20d8df5411aaccfd0495e15be024","ssdeep":"768:jdMcEcNSeFGElQay75NWoZprO4Nv0HD2lcilS66RcleL4cbMT9KGvz/vdXGc7Rrk:YecE4QCpxv0H64NxlN","tlshash":"145372d81606d4da8e5218eee8b3e009e0645e53cd6cf267967dedc0b56df22c08727b","first_seen":"2026-02-16T13:46:23.130966Z","last_seen":"2026-03-18T11:31:40.690317Z","times_seen":53,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/bdag.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /bdag.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517282\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-542fe2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aw7d5FEy2KEd0mS3hYeHF%2FCrqp%2BdCWTgUkPzCcnB7ASzb9AyJqcMCLj7dtmHEHmGwP7sT2Lk%2BPwuy0RBXilVLSjXsMDRBdWcO9JknK%2Fi%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae94bcfe27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517282,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 481","md5":"6021cee3cde78f3b2f2ed7589dfbb54c","sha1":"f19863859aa1676033403f6f575e18915f000574","sha256":"04e8bd7c4c089d1b27cc222f590a77f275de504d84fe0cfb5dea759a450d04b4","sha512":"b3376503e50e0431ab45bfcea98a7fd6e553d990f08222cfff0372f42f2e6841c1f558d98fdc723ab5ac799a7f4054600d4244b422c0e9544f013740c7ab27fc","ssdeep":"24576:Y9kWE09ubhjVIOWdKiFfhxeekxeh215gIB0:Y9LBu9jVILe5401B0","tlshash":"8525332f4b239587b187243c7942ed85443c28ba3f298bbba6d043526def9ed80d7561","first_seen":"2026-02-16T13:46:23.154604Z","last_seen":"2026-06-21T01:46:01.921931Z","times_seen":57,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":697,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/notification.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /notification.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X02dyf10EZX7UQfBGhVwC1dBrzf85apc8M983UTC4lRBw0Q5Djw5bLEA5bxh%2FN43d8NHqxnuzo8YhBRqMI8zN8L5nO0wzDPHImosaNRBT6w%3D\"}]}\r\netag: W/\"69b0427b-32d\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94bd0f27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fac897b16e75a11180c14e60434de931","sha1":"3156bd743d51feb67c0d884708279b0fd3175285","sha256":"b5c19ee1a738edba6aef7ce8047eee25ad1aa8b4672428a607f66d9ad991d3f2","sha512":"8c8acf042d2f98658f13ae5c84c6713a8bb78ba8ddab5ffadd52778d4af0956fadbe2e57f5dd5edcd6981367cffd1a8a1abb382fbc6e916e8df3673d7b4ac0a4","ssdeep":"","tlshash":"1d01bdfaa2844988a21f6f90e55b76e424f734fad99899d4c0009b62eb9140ec85e9d4","first_seen":"2025-06-19T20:11:15.790867Z","last_seen":"2026-06-21T01:46:01.925005Z","times_seen":59,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:51:23.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhxrUgZyPZjV8fKzzx2KW39YWMDv06oZavnYbFLp3NMPVaxNntennX3av16pJj5P8n659Hbuc%2F8Wj%2FXSjtGziPJFKy3eOSqljx1gVX0t3xQ%3D\"}]}\r\nage: 123566\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9de3ae906941aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56027,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (39271)","md5":"615fa1c25639ab85c0afabc22d2bf313","sha1":"6cc350570ba612c0557a92b78cc791325fb7f175","sha256":"285b63474cb7e2d2cd174f34dfbf304a172a638709f74602c7cce2847536f424","sha512":"214a20c4d8796580a80e41b08455fc77a1da45042891510ef76e85b015d3ccde643d2d063cb08bdcb636ed67d9d1523aefb6335aaabdf8bd949edf1a0e1785f6","ssdeep":"768:/IJEJ+KJNhFXoy/L3O9SsShY+guYb9wVnawyteOvFzAVm/9vRpI8p9vzoCx:/IJEJ+KJVJ/BTMGMzI8HvzoCx","tlshash":"f143f8b1e7ca153b5607cbd8a866a7b9232a590b9b174d8cb77c03f07f84d9ccc26844","first_seen":"2026-02-16T13:46:23.148704Z","last_seen":"2026-03-18T11:31:40.676909Z","times_seen":49,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":139,"dns":108,"connect":8,"send":0,"wait":22,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/498ba6c5cfb89aaf.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /498ba6c5cfb89aaf.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-924\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVDpjctT87WRlL7qSylz4O3M97FJKOLxeS84YSOlbt4cRxMklCGWYePDCMmzo7I5aJ386TbLZ18CxU8jUXCac1c4v6X49F8gttYbaT1ICQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91decb27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2340), with no line terminators","md5":"8c3478299f7f09066cc5ef5890e7de25","sha1":"6b464934cd7493724929e2ed1547deb7c7c6e244","sha256":"d6d0d7eed6f8657cc8c1d8080b9be06c7df5129b82e108679aeb4d7b4325d543","sha512":"70402dfc0c1cbb18f22a8d7ce09c67c9a39b48c60869ac55187cd2db021eb736b563e59b8645be505d0e05dc6c74e63f072bee5efcbaecd8f9a6b28ae03f78ac","ssdeep":"","tlshash":"874157750d3e6979f49fe60e5d68e08d1154b83cd50f19b07c8a772a04c22b30aa2eaf","first_seen":"2026-02-16T13:46:23.152903Z","last_seen":"2026-06-21T01:46:01.928972Z","times_seen":56,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/13971731025ec697-s.p.woff2","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CI9jBZlnYyRxN0k65AEjCzt1hY4duyOmHjTtMasNW7HTwB1AcJhcPo2IfrRw%2Bd1AuK8Lk7xgLBiEoaqKMM%2FEMvLhjPOJM%2FEnZTXn7GooPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae944c0027f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-23T22:26:39.885902Z","times_seen":6043,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/usdttrc20.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /usdttrc20.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cb34kuHqIonZYhNTj8bXsH81OdpUWFuEeoRITnoIqFYw3cTFARKJCR1jvf3fdSc8pZCm9%2FOGPAdOgcYwRkLbz8rMi2500C%2FQ0Vh84nJHPOM%3D\"}]}\r\netag: W/\"69b0427b-7d2\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd1c27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef1534c37f54df61a5c7ee5f78d94094","sha1":"907b04a2cec5838f0d819d66e3f1bb0a7f08b696","sha256":"bc6654eb0672bca955fc64e403350d69a459e6001d2f82c742074fa532a52360","sha512":"4212be40282404e1b857289d3faa3b8b68f4d5ac044363891d76e527a59b05e8489aadda612edb26c1055d9645e84083afb23d0b0cb7e552b53dc196e4341c82","ssdeep":"","tlshash":"ef41cefbb3c871e8d401d3b8412a80b671ab38f976676f4043e49b95e71619a558d848","first_seen":"2025-06-19T20:11:15.778597Z","last_seen":"2026-06-21T01:46:01.92772Z","times_seen":65,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/kas.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /kas.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLWyZJvCutJd84ikbUtWnyubqFeFUSKDCHoibDzSkzE5B7Q%2B981cQmBU12mcMyBkp2i3FnK5HYdSyxjJ16aA6NZWqMB3MmeX9CPj149noGo%3D\"}]}\r\netag: W/\"69b0427b-570\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd2727f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3860ad07d109d648eabb425bde1f6ddc","sha1":"abcabaaba4b39fc8bd940e62df280cda4cc4d7a3","sha256":"2c79f1167e3f642ec31165701b94a090ce13d626d5c1f76c71fd9018d5c69e08","sha512":"7b759c6b8a973646c857267a2b5291ef50daf26b799ea5629ecf8d1304559d310d55ab57afb7f1fe15044b821dfdad25f4444ea83a6e7c50d24841ca9523e7ff","ssdeep":"","tlshash":"b021207c933650bce24d07988af105082b6ae4ab23900678bdee94b26f25ca45165f74","first_seen":"2025-06-19T20:11:15.832193Z","last_seen":"2026-06-21T01:46:01.956948Z","times_seen":67,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/bdag-logo-xl.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /bdag-logo-xl.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 20433\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-4fd1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zA2MTqfYFoFVNzk3gMAtUus1LP4AE8UeGJTuxy2f2MaGEyxhMNGdilnbjURVRVgdlbPgcfwmubA6Hh7YihMEFo7LGp5giEAiuKN%2FJvWam0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae94cd4327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1768 x 390, 8-bit/color RGBA, non-interlaced","md5":"ecd7b1eb2b78b216b1a0b03ca72a0b54","sha1":"d09e605c0f350472e1a59e22420666870f703e23","sha256":"6dc1df8cf8f9b4cc4fa4d8afdab4e78eafa5a6cd4a7c63fede6d672fa3358be4","sha512":"473e6de9e68b2e2ab9290995bb2c1264c6329de5e9247d62d495fa0b597f3aceb175913e1a122b511fe43470df259ef64235214d03c06ef015cf0fe8ed97e586","ssdeep":"384:Nu9bhY/IKbrho6/Br8r2rxODhiov4Jhxs0BoQVHPvUqy8NLQDiz:Uk/Pdf/Brw2VOCdvMqy4LQi","tlshash":"b192d1f28c5f7196de8d6a3fb28bd213369f4520d039b0451926d17a188723b53e7ba1","first_seen":"2025-06-19T20:11:15.795922Z","last_seen":"2026-06-21T01:46:01.959617Z","times_seen":63,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/secureproxy?e=jscdn/getFile","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blockdagcoin.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://blockdagcoin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"1vhrqkst874rdhog7eeq\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sN4BLoHgSMTe4mEBtTYD5z5G5w0tfQeuLNlHKX1l%2BeBXkwSlWsTkGhzlX5AmQHZX1E%2FuvWx1J9CdYYSxIW79rsksEWE7IBAMsC3O7wV7PS1pZA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9de3ae94ed9727f7-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3406758,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"59a131944cb20766414af29eafc1f525","sha1":"e13ce80c0bf80899baa97d87497da312d406be3c","sha256":"cf3b1b914b6a429896f5c68a8c150d882850334555d85dae9bdc3a73f94983b1","sha512":"b31d5ad13c4190984ffeb4ad66abb4f44f844a823c4a5b152deb019625dc5c3740abd983512ef9983e98e8faf86dc93882eb330926c0ef79557a955957094eca","ssdeep":"24576:vb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RCyX8n+:DGkwdNZngkO5un+","tlshash":"b52523e3af5b482cca6c0d99206e2d0f2e451c052045eaf7bba5d48735dc7b061eae7d","first_seen":"2026-03-18T10:51:53.840652Z","last_seen":"2026-03-18T11:31:40.687103Z","times_seen":4,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":633,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/icon.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS8VmGrNr8gyUsQq7%2Fn6I%2FPDyIMyrsnwlWFWm1sqAtXLvtsqDLGDfBRCRxXrNEOsfRKg8c2kAzcgv9DgYrLp6QiODYtSfZu0dqzQZEhNoyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae975ac327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/a5a4abdda4f5d95b.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /a5a4abdda4f5d95b.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-20f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsPINpF%2BFb5xSSl1Ov2ZfZTFu0vFDyKfD1qk7ESZYn6qYqtyILmtsC%2BRrt8Z%2FG%2FunZr4GPffmrGr6wuM%2B7%2Fe33aAaqdk5pwCl9wN5N0BN1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91dea827f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8436,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8436), with no line terminators","md5":"f1dd8332cb09b49ed69443df5e72fb9c","sha1":"6886d87e590663f9cd9c8b8881afb3aba5f0355e","sha256":"ae96555d9f531faa3bad427ea9840155580da5630161d68873b4988818462c75","sha512":"a45cff97ec5182de984fb26a8b3e346621168d8cb25c362988361f40b66bc8283f22747ff1dc8bb41de569754e44012adb36af479d4a62ce80fc63b76e75cb14","ssdeep":"96:jnK0flfbIFDQ103ZWzXiqJgymkkpFKN4CjjF9nDQ689XIERD8oF7lGUdkXe:zK0qc10AgyEKNbjjnD4nrGOkXe","tlshash":"f702c7b25125623df613ad996adce67c4134ec028f1b9adce20162b6d5c33f31da427e","first_seen":"2026-02-16T13:46:23.150759Z","last_seen":"2026-06-21T01:46:01.918778Z","times_seen":53,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-12.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-12.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9W8np8kScP%2FJgMSoHlJKc%2Fcvr0ppG0AgDco4X2hNlEbOvzB84JNuIw9WUf3jwPx2BJOo3DKIKXJ3IXVNDhrxZ1E5RFJmuoWJglkkE1fDQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eee227f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-11.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-11.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZAmg0CtStjRANlJgDCtRe0AGYDzb5HP1BmsX6V%2B58fRVHfA4AK%2FvmRWRrh%2FNr04TLOOe4S%2BsSrU9R3Qdfl13P6SCyZ1e93nuwWBEx6PYLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eee327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-1.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-1.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QQllljDJWM0XOFlhTQexLXUToflJgK5aVkp6RQWy2%2B0HN5GmfiBcUjtbo52hXHvIjWQ2UHUGiPngNnflFEiEJgIIVC%2B73JzVt4rDf29NZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eee727f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/index_1.html","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpeOCucAwRtgtO255EtP1NESZILzxdc7c9%2F2kxgoOB0t%2BQydVngXOal0l%2FywSmrVuvr%2BJfCeVsoYjTRcTmQl0MoRrnInRsYPsCTYlFJnkaM%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9de3ae942bb927f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c942614d3f9773e936086634f737ead0","sha1":"b6828780be6ee065e1be2029d66fcc9ffe02d4fb","sha256":"842b929566e8602beee48ed67f7a15f3d2ae4653b620d49101a287dd6932cc08","sha512":"c4d9f8ec86e10fd7337c9537d66c67503a6df4fa2145984e3924998c6712a795dbd17af2280a763447a4435b6e7886e9cfc18482a32a33d4fa3fd881fb6b3333","ssdeep":"","tlshash":"11d02272d106040ecc019aa1cbeae2884446da2cfb105a182df432a0964d2338932b6d","first_seen":"2025-07-13T13:26:15.217606Z","last_seen":"2026-04-11T19:18:11.451719Z","times_seen":52,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/favicon.png","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11883\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sb%2BE8aNJLe%2BfE6KKwy3XVaNTZPf0Htv29s3lXShmkrs3BJHSLO0gN8b%2FNhMXoO%2F06ng4s2QXAoBEWzsdq1vkYPJiXzmVyH%2BTOnymE7roAVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae94bd0b27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 92, 8-bit/color RGBA, non-interlaced","md5":"293d3f716af9693ac15909fb004afd73","sha1":"cc0833ca7a4ea590da0295b58f3de5a58c640bc4","sha256":"c1644d19e796afdd60ada8145be62e4f338211cdc5f747665187c3b045d058be","sha512":"f703224796cf390984e5fa1d42a7f1a8c9d67bbcb14d8140d55d4bf9c1e7e7012201d10e2fd6602c7e31e54909d45e36e761b660de06b7c50f99b65dbc85f0b4","ssdeep":"192:DSZev907CogTxlV65iRhkNVGSCDhOHnYJsFMgnKWDVAmcpanPq5xnmJIm5hLC+Ro:2Z807CzbtL3sMITxAknPwxmSgNC+Mf","tlshash":"af32cfe1e6f6bc223780792742e2d7d426ff7db309d5a945298db8744af305c0b59870","first_seen":"2024-08-22T17:20:24.025712Z","last_seen":"2026-06-30T03:43:08.617951Z","times_seen":166,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/extra.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /extra.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOywTRGn65tdfwC11LBQZndbOLUOaTYFzH%2BLvakztil5d0ZzoXbWiNurInFJ6Q2lDBbNZ3G2WVuTkPshW%2BCkpdkKUmlhaVbLdv%2FJfYkn1uk%3D\"}]}\r\netag: W/\"69b0427b-18f\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd3f27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e48a280bdcf2f90a1e7348d479e231ae","sha1":"c37e1f15a5410e44336d6fc7088d88e63703582f","sha256":"3384e9c72abbdf2990be49e9909ff16db11d163f9698343ca5b169fdf6c81e1c","sha512":"4882316870e6575719718801ed83daba58c0296ca7ff46f9ba6e3aeb5680410225a44c94bd09440e9b5446d4feb3db5df3f4b235e9bd8bc0ee3fd7ce35545610","ssdeep":"","tlshash":"7ae02b996248ba28e5168759512cf7bd301670d1877ca004c940362a3ca64bd5c346a9","first_seen":"2024-08-22T17:20:24.009027Z","last_seen":"2026-06-21T01:46:01.943324Z","times_seen":62,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/out-7.gif","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /out-7.gif HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHaptswZRrcGBwmDB2%2B6OwrqWVE4SlD6nKY1PQ2AQUIIn0eXFt10o1Z7j2a5C01LZaoKZ3ne%2BWHQtKG0%2FSDQPbLMaXfopTXRFDD4oD2ibHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91eef427f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-23T23:51:00.725821Z","times_seen":1005898,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/doge.svg","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /doge.svg HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJjEulQiL1SbDho9fVCVLHShCRq2uvtcf0gi34OltyvwzNI1QsBZDvU1yPpqTvD3VS%2FQuTB3TgF%2F6QTBDj55nQ3uOpS1v%2B1MBKJc%2B6BLgs8%3D\"}]}\r\netag: W/\"69b0427b-2ba\"\r\ncontent-encoding: br\r\ncf-ray: 9de3ae94cd3227f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"988a386635492284051de264a0594acf","sha1":"8fae3473ae4daa811c217b311641c08a8f9ea295","sha256":"668f8460ea5932a26dc2ab7897e17d75ad1c5adafdd4e620abdb183c6c304b88","sha512":"fc827aa3d72ba28424de08adc58c6eb6c17117975ea900b0273ca02fd5f8ddb4438b02ecf2137312e854b733c2865a6a327a688efd70a6e19f75a48e9c952a96","ssdeep":"","tlshash":"5a0170e394ccc1649706e3ae5a2b783a345735f47b36c956c1c03317acb541f988da41","first_seen":"2024-08-22T17:20:24.008063Z","last_seen":"2026-06-21T01:46:01.948762Z","times_seen":62,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/a537cda361603d01.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /a537cda361603d01.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-1092b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUG7Bkuy2clCX7CnL1m7TZT7YhB1zBOur2YpJms%2FzeSTnibQCDoiunvOOgLVJ1JX1hVfSF%2F8sfCP%2F6Ci3etVAATsr08uJyHfqhRu%2BAoyAJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91dead27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67883,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dcc6e57d55160ed93e497c73c5fedb89","sha1":"7aca60b4a7ffe158ed8cb143485f332c4ca56a1f","sha256":"3a3c554f48f716b2e7e230d0f7299d78077df3d7d3d5261c9db7304b19625307","sha512":"4b3c9b1703f3555989f4f58134bb65395535eae55a91a044d1e64918c319db119670978ed71c09c4a3af0dcc8d1c99b1ac2786c5e1cdb6bc92f2b6b865cbdd1d","ssdeep":"768:1dA5IQOmW8XRDzcq7hSN1ZcZ115JttpXuhILqlGx1GBiodM1Xr5v9/8zeQPwUdLh:1dA5IQO0XRDzpSN1Qx1YxJ","tlshash":"f9634474412c686ef897b0926ecdfa5e513dac214f5146e0ed6a083a45c23f639b07fe","first_seen":"2026-02-16T13:46:23.129613Z","last_seen":"2026-06-21T01:46:01.923242Z","times_seen":55,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/fc4740aaf7ec08ec.css","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:23.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /fc4740aaf7ec08ec.css HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: W/\"69b0427b-123a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xd2r%2BJU1Ga3ROWA9LzgYyEHFAaRJksXMAway40ZTCCT4NZnB62R6y2yCYLOuLVgQN%2FruiasaC%2BE4JGJOvc55A1hnXerI1ZO7ROzfXK9uwRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae91dece27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4666), with no line terminators","md5":"ab1069311ca1e5dfd0ad9692ba2847f7","sha1":"2e28518ad9ac308bb9e91668267acdeb05dc901c","sha256":"d10bcb644b5ba6fb8bd7ebff5660298021a79c3c85c6ad21f468981a1e2dc4c4","sha512":"586bfbffad86b06b8c1fef333236ddf4246f8edffcbb05a4af26805d5a9be1cdd2fd32b8596e86c6e26716ad1ac0c70543e88d02dfc149ec695f1ea81490a481","ssdeep":"96:x2mK8Xt8I8VH8l8v8W8+858f8d8paTZUwcD/Nf5Rx6q5qxqh:NxUlDUch","tlshash":"23a159f603be5f28f82755546bdd818d3a44d800ab0e65e2deb390b5518b1bf38e913a","first_seen":"2026-02-16T13:46:23.153715Z","last_seen":"2026-06-21T01:46:01.947486Z","times_seen":55,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/13971731025ec697-s.p.woff2","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36980\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-9074\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mEESyE%2BzMnZRbgGMpcpl2844MGRNfoelwXfZGMOx3%2Fiy0U0C1O9Je7DgS7qStV3QX1JAEVDhOUoN%2B%2FZS6WRKA5%2Bn16md2z7vGHGLqCUYRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae945c1c27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-07-23T22:26:39.885902Z","times_seen":6043,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/6ca6224f9376cc31-s.p.woff2","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockdagcoin.xyz/","date":"2026-03-18T10:51:24.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /6ca6224f9376cc31-s.p.woff2 HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/a537cda361603d01.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45388\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\netag: \"69b0427b-b14c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv%2FgOhYv%2FkY1g5idr8HMsIiiR6J3gFDnq6xJOuZ%2FlsOwZ%2BA4%2B0qWIMuLE1%2BLiK4XnHYnzGAbwcgWblQGlH%2F%2BjwGeX5vxLLOXpI6u8Zmqf0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de3ae945c3327f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"2106084f5b102e873ea725173ca8d8d7","sha1":"e4392b8344edc97744d12f9b2e6009f47fa2f19f","sha256":"8b44488a5ebc1871afc2de2427fceb60f8a5be75fbdc7e666b3386fdb0e280e0","sha512":"198f36a883ae293f7f2c97bf0f9ba84ea3c1628e98933d191deb9e358bcd2b18b82176a07d4f56882e72315aee14f5757bb0d522d555e45d9242d41f0a1b80bb","ssdeep":"768:QVvZ9kCZGF/pSpg+0EhCH5wZolZ+curQgOK1V+MvTTGL1Lq:GvZ9jGF/9ch45wClNudsMv/GA","tlshash":"ca13f12ba138a894e1e17d7776a999211da143e3f35e364f0b74f3806aadd284d19c34","first_seen":"2025-02-26T13:37:41.74679Z","last_seen":"2026-07-18T16:06:57.570714Z","times_seen":133,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagcoin.xyz/index_2.html","fqdn":"blockdagcoin.xyz","domain":"blockdagcoin.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://blockdagcoin.xyz/index_1.html","date":"2026-03-18T10:51:24.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockdagcoin.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 15:49:25 GMT","end":"Mon, 08 Jun 2026 15:49:24 GMT"},"fingerprint":{"sha1":"3F:FE:69:32:0D:05:72:7F:90:74:48:CE:6B:7D:88:A4:6F:F3:9F:0F","sha256":"C8:D3:AD:82:D7:5B:C5:FE:BD:75:45:3E:FF:CA:6E:18:4C:86:92:44:F9:38:20:F7:C7:15:C6:8E:5A:C3:5C:A1"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: blockdagcoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagcoin.xyz/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 10:51:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 10 Mar 2026 16:10:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfRhdJWuYlYC344MSbou%2FXyQp4foeXtSxvtYvd13ZlYGGOFmLJmM89e9zuZnKxzr0gcm5%2BG9pjU8L4brzlqYVfGP0iMqhJMBxZy2JHZ6UCM%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9de3ae954e9e27f7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c57807b51b7135a04cbaf45a0118626f","sha1":"86de624de7981f952649a625c1d3e6b9ca8caec9","sha256":"b8cb58dd3848c423833eda3a6eb54fdd648aca6179a6ea34eb50e1242b74df51","sha512":"a7467146ea68779c1996b0dc149142f6275e8172232a477b3a258897a596ddf765e3531fd32dae660927a80003ba80ca939f121263c37584eb47a70e39190a66","ssdeep":"","tlshash":"2ce02d23a262c8064ab083c00fe2f2004007d81aa0338cf4bcf2e49c38d82276016be5","first_seen":"2026-02-16T13:46:23.145232Z","last_seen":"2026-06-21T01:46:01.950274Z","times_seen":50,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"blockdagcoin.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}