{"report_id":"a309bd8c-aa83-4b36-a0b0-a2dfb406eb37","version":6,"status":"done","tags":[],"date":"2025-09-06T15:30:10Z","url":{"schema":"http","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"title":"Welcome to NodeRestores"},"submit":{"url":{"schema":"http","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-11T15:30:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"blockdagsupport.com","ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-02-01","domain_rank":0,"first_seen":"2025-09-03T18:46:02.453066Z","last_seen":"2025-09-03T18:46:02.453066Z","alert_count":7,"request_count":7,"received_data":1697024,"sent_data":3342,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e533a4b9ab1d40baf4ac7fc0d6c6e31a","sha1":"7e8ea8c28f3b0f03d4210f6f213b6a68f2a1ea07","sha256":"6c986cfc3cf7a26804d07a48c4ca2f059c414f4c3971289cec060a3b226a43d9","sha512":"b061e78206e206e8ef42a40dd63f5ad7f3e81b69fd665740fca0dbfcb73a67c3c8b605165312509775275abee0c1a61f9c26f9a15b84930e846b755f6e17f8aa","ssdeep":"","tlshash":"cff0e51a24b6557026afb12d230fa24a307210df1008ec053e0c8e584f64a9a55eaeca","size":456,"data":"","first_seen":"2025-09-03T18:46:04.69805Z","last_seen":"2025-09-06T15:30:12.329473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/favicon/favicon.svg","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:47.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/favicon/favicon.svg HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Sep 2025 15:29:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Nov 2024 17:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 210637\r\ndate: Sat, 06 Sep 2025 15:29:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":281575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09da00f240efdca2f91e688292dcbc38","sha1":"2aa0feb9288a1c29eae4dd9ff5e461a65dedfb47","sha256":"54c455cc25fa45b9ff35726d851cadb3224024303cf2a1baf610d64620f6de13","sha512":"09827fcc00147f44ac6bf7132d98cf5d3ed11fe41e3e50a2db4ce834b596649681fa35f6553bc08181d3f276b0197e6cd8f48e142769b864ff26e1e901fb62f1","ssdeep":"6144:hRMESEo5zH2fAeLQFQojmmvnBYe1pSf1wb:hRPybdccvdu1wb","tlshash":"e85423b4a66c9f641c4c83b861203ba83fb1eb9bddcc64e3191aa9da7fd13d05d4d019","first_seen":"2025-09-03T18:46:04.680679Z","last_seen":"2026-03-05T01:45:11.124957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/product-bg.png","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:46.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/product-bg.png HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Sep 2025 15:29:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Dec 2024 20:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 555534\r\ndate: Sat, 06 Sep 2025 15:29:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":555534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1158 x 476, 8-bit/color RGBA, non-interlaced","md5":"ad01415350edf7d0a1aa3d8390be39c9","sha1":"028b2cfeb548eaa916f30af40cd1da39aec17bb3","sha256":"9a94b86ff700672a8e8cbbb1c1f5c3d50ff6eb4bf65bb6cd7407891d554f22f2","sha512":"1b57c8bc9a7e5483845ccfdf5d9c470993563f7343b7eb5c5f1f484ffd247e31b0c2b7ab36e5e5977ed486aa1bc6eee1a10e924d4ff48f120efcecf59c0f5d82","ssdeep":"12288:YVAendo2pfM29ii1IZsr38d8lwc0PyotEY6EXikgu/F7O10bIgDO68Vh:YVm+fF93/4CllIdsEXXBFSkby6S","tlshash":"52c423920afa2e068d2dcc2fd032fd985e1d5e1b5c7482bf0954a9cb2719d72e56c0f2","first_seen":"2025-09-03T18:46:04.695834Z","last_seen":"2025-09-06T15:30:12.322193Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/favicon/apple-touch-icon.png","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:47.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Sep 2025 15:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Nov 2024 17:01:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48324\r\ndate: Sat, 06 Sep 2025 15:29:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"7948db7430f9990f8a823a2a5ebc17f8","sha1":"c040c4f6bfa25224ea9575ea0e33af80227d8d13","sha256":"db95ef8d0063121c27d35f4da27de6824f22ba37bbf6f6febb2cf52746e6e83d","sha512":"796e4e3ca6aeb3713352f39b2efce4c49f8232f512d5c446bd1d1f487dca0fe2a696728a69ceadfca0b57cb562b6de588a3a785fc66f2ac2121d032ccc54c4bd","ssdeep":"768:vekoSQtWkQZNVfLU529BYSqjvpzVj9Qu2h9krWoBUlNk5SCoim+/3AOPkZOSA4OD:mkytWkWBLU529BZepzt93Ko6lDZiUZON","tlshash":"6b2301c6f2404d7f979c53ae4e81ba15bfd132df9276816b4528483ec8eca4013b5acd","first_seen":"2025-09-03T18:46:04.676168Z","last_seen":"2026-03-05T01:45:11.135502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-06T15:29:45.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/ HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jan 2025 06:41:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 270874\r\ndate: Sat, 06 Sep 2025 15:29:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":498022,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41445)","md5":"8cd15ad798d7bc5063f25b0f66c52a77","sha1":"8eae44100d329dcbd3733446049c94be32a57fbd","sha256":"12bc7196cb94d5c5fd93007cb3538f1fb0bee76e15d9e63ab591dd144f351482","sha512":"eb211691e992a3eb5c8947750c130fd01b2b4804df2b61eecb97a001e511d9e7945f6f279e4699e5d97ebbe213076fb696fbd8a1dbcc5ab9a5d7520878741498","ssdeep":"12288:a/b3Z363rvAFFwWtGdZ07hO8AN/IfG1JYfAi:A3Z3637AFWdK48AN/If6i","tlshash":"8fb4f1aa98f3255a1517906c13eb2f4a3f25d507d40eee957ecd1384cfcabc488a3798","first_seen":"2025-09-03T18:46:04.686211Z","last_seen":"2025-09-06T15:30:12.324673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":369,"dns":36,"connect":108,"send":0,"wait":113,"receive":444,"ssl":222},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/smartportresolver.web.app/3ccf3692-798f-45be-8012-e26ee3a9ca07.js","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:46.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /smartportresolver.web.app/3ccf3692-798f-45be-8012-e26ee3a9ca07.js HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 06 Sep 2025 15:29:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-02T04:42:48.262748Z","times_seen":145271,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/bdag-logo.ico","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:46.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/bdag-logo.ico HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Sep 2025 15:29:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 22 Jan 2025 06:29:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5242\r\ndate: Sat, 06 Sep 2025 15:29:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5242,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 35x35, 32 bits/pixel","md5":"447e5def290924940855f77d9c4aa77e","sha1":"a41c3e394b7d99e9531ed88d426ce746f71b9b85","sha256":"f9761fbb3cf7d88e5a617dc2be5197c676242b73de91f920eca06b551ac61371","sha512":"7f2c1ab44d42d26f10dd15f3a0d922338b204c76b10122931fd431a56befaedb133879ffdccb2671d50b6319b68512fafcee07682e4072410beae28a265bc25f","ssdeep":"48:9GyliV86BZ30ECb9nwmnUhN2R2zekocq5z9r7gbS+Vj:QExl0hNi1ch11","tlshash":"d0b120266045e4c5c1883af4cd2490fe07212f86df1a16672435bf1d39b309bef2e61d","first_seen":"2025-09-03T18:46:04.690888Z","last_seen":"2025-09-06T15:30:12.326274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockdagsupport.com/index.html/","fqdn":"blockdagsupport.com","domain":"blockdagsupport.com","tld":"com"},"ip":{"addr":"64.187.97.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockdagsupport.com/index.html/","date":"2025-09-06T15:29:46.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.blockdagsupport.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 09:12:10 GMT","end":"Sat, 01 Nov 2025 09:12:09 GMT"},"fingerprint":{"sha1":"7D:46:E0:BF:64:19:71:8E:10:EB:9B:5B:7A:C6:55:FD:2A:71:CD:D9","sha256":"8F:31:7F:00:15:38:A6:4C:DA:DE:45:02:43:17:75:D4:6F:B4:4C:31:F2:22:0D:60:6F:DC:17:36:26:1E:AF:4F"}}},"request":{"raw":"GET /index.html/ HTTP/1.1\r\nHost: blockdagsupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockdagsupport.com/index.html/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jan 2025 06:41:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 270874\r\ndate: Sat, 06 Sep 2025 15:29:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":304946,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (41445)","md5":"7db65b20c0a1e9052f3e40a3712f0ec2","sha1":"5173ef8387820d791f1293c87a2aaad438e3ffe5","sha256":"04c23e394f3c44fb80099b8c3962fa521ab8c71afc7f970c827ea9afb0d9e51e","sha512":"7e6b8b005eb259de02973add7393fa9db157af744d4ff53e74b31c51fad8a8c0a28b09f208257d45a0a955906450e0dba51d8830b0748f12b2da454dea2a6169","ssdeep":"6144:a/V7atq3P7atq307atq3rD7KBFn8UwWt2jBdfMUqZyYhULBHD:a/b3Z363rvAFFwWtGdZ07hOj","tlshash":"795413a28ebd4b7223bcc1bd109bbe9a7e2ead4a80513d1536ccc7a05f657025763734","first_seen":"2025-09-06T15:30:12.328038Z","last_seen":"2025-09-06T15:30:12.328038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"blockdagsupport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}