{"report_id":"04589c1b-52d1-4527-be94-506f835d8e45","version":6,"status":"done","tags":[],"date":"2026-04-12T12:46:30Z","url":{"schema":"http","addr":"buttholecoinmig.xyz","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"buttholecoinmig.xyz/","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"title":"Butthole Coin | $BUTTHOLE","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"buttholecoinmig.xyz","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-17T12:46:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"buttholecoinmig.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-31","domain_rank":0,"first_seen":"2026-04-12T12:46:33.021324Z","last_seen":"2026-04-12T12:46:35.033171Z","alert_count":46,"request_count":23,"received_data":2472115,"sent_data":10465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-04-06T22:55:15.954053Z","alert_count":0,"request_count":1,"received_data":9728,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buttholecoinmig.xyz/","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08c7b6b68215545c44ca8b1a96ca0f83","sha1":"9787d696d3085ffd48feea5d6ecf4b7ba423f285","sha256":"382266b39aedb052d4a5c9ab83b4177b12e3ee5574efdde046713d1c72711a6d","sha512":"27554dce591bf9bd448ea23555b18d6cce8b84980bebf12b58dc5b026e60820bad19bff492aff82b95f52aa0fe2506357298934ae6588558fb1c387afad8d394","ssdeep":"","tlshash":"0ed0a9cb404008e14be322338e8860743a3a40cf0106b3a330b59a14626c7ec07cea10","size":215,"data":"","first_seen":"2026-04-12T12:46:37.058236Z","last_seen":"2026-04-12T13:13:04.98197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/_nuxt/assets/index.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bba55ee9e6c11d91b559560005b6022a","sha1":"3f3b0059602bbcb7246776e9a52c07c6849f22df","sha256":"a7541b9c95b6917fbf7fbcf87dfd868474d7b44fb283c9468e7d51a46ce06c95","sha512":"a977e42795a8a56360b4babd433e5b3c14e2bd8ca6e54942c773410e1528b33b0208103ce11aefead9f3314bbcb03679eeb0811efce9351ec2d88fb044bb023a","ssdeep":"12288:7qxo8hUvftg7EboGcu1JfHn1jgTRboQ+RClsIlr7gJji05//4j/YWY5hSxAXy6:7kOvftg7EsAOsIh7gL2j/YWAXb","tlshash":"1415c7af3378f052259868ec2fa19c7854ca65d2ebce03fb63469c44d0e05afb355e91","size":935675,"data":"","first_seen":"2026-04-06T06:20:41.293589Z","last_seen":"2026-04-12T18:56:39.522432Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d64f4a45cbab9edc6c232f134bdd5d09","sha1":"73eceb543529820390e1d82f794075d0d3111dff","sha256":"995de1cbdb64097bdff3f8a98178d8dc1317554807544567a27540577ac95386","sha512":"41a8caa7399d0ab0723408a4707bfe27e7e08ad3af06c50e414e04e024816e5e96dced3bd56871e01cbaeaeabe727d5e855680d8da4ee7eb6c960634bd1433fb","ssdeep":"12288:UKRgIFKLDtC7MC6Wsa71h7gvNKoz/PonlYDMiBJ:UcILDtC7MC6WsaL7g/MnlYDMiBJ","tlshash":"7515c46d3378f012668d40ec3f9288c864cd55e2dbce07fbab945445d5e0a9fb16aee0","size":904819,"data":"","first_seen":"2026-04-06T06:20:41.306246Z","last_seen":"2026-04-12T18:56:39.526836Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/Butthole%20Coin%20_%20$BUTTHOLE_files/index-DXmsxIWs.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"260ea6adbba13cf576272720b9e81ef4","sha1":"c5b091ffdf10147d66aad449b67b15532e55e8f6","sha256":"237583e26d01ed4e301157ca3d1ea31e2681d757c4a497a2d7bfa60ee4550cf7","sha512":"d8726387a1b26ea186ac7bf1e73a22cd659c6309d495f979603f9c32e476af99f344ab7ee11e7d82d7a5191cd6a9c62f0ecf3b4c28ee5a19d3e22640ab4b69a0","ssdeep":"24576:y4+v9dqXic8g3pEAmhOhlwB6YBFhWZMe1JDWtT6ZOEaVgL8/a/+ST:y4+v9dqXic8qpEAmhOhlwB6YBFhWie1T","tlshash":"f3555be472b66016579390e6107a0143b2297856780cc4acb62cecdf7aa5446b2ffffd","size":1330740,"data":"","first_seen":"2026-04-12T12:46:37.060938Z","last_seen":"2026-04-12T13:13:04.981159Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/script-h6506.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"856e812008ec7c145fa0343cd601a50e","sha1":"3952926479282375b0f07257ea1caf85eb61dc6e","sha256":"e67c75e04d84fa63bd9f19e1fc37b5db4b3acee26cc22ede7ffe2720e49927c5","sha512":"e012f010cb79ba174badf105225cb7fa35214c946d8d9713495e87651d83285f76afb8c7d3469282be7e5cef7e865c5687a2ee5abda8a67ed4398b6cb61fd457","ssdeep":"192:OGoh6/dZw+Z8rEuEW52UCBYh3SD0jMkW2dDjyaBwSV8uztFPmn6VdkzD6YBIWy7r:+h6H0wsiONVrtFk6VdIDXIT77BRRqM","tlshash":"5122d8693240343241ab55db22e68386793de049bb0380e075bc08e75fb5cdd36ebbb6","size":10264,"data":"","first_seen":"2026-03-20T21:09:39.651174Z","last_seen":"2026-04-12T13:14:00.925265Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0117c7b0797e8538cb6efe02b4ab8b89","sha1":"1605fd408c58b58244777b599c80ccebe743c206","sha256":"744ac5c1530fcf692cf5e36209708c18d518eb85df06411b779f4e9e610c29b4","sha512":"10d26a59741aaf0bbb37921bbc58431fbdf2692c6c80a0422d6347e711b2bfe6d32331ad3a9465dd0c147f6eb4ca5e105ddcb9a8954f30414464c2187dbbd4f2","ssdeep":"","tlshash":"bb01ac492067603a53371aaf8ba79048f7641517314dc4acfe4c01597fc131da3e2fc8","size":685,"data":"","first_seen":"2026-04-12T12:46:37.061704Z","last_seen":"2026-04-12T13:13:04.982748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:52 GMT","end":"Mon, 15 Jun 2026 08:38:51 GMT"},"fingerprint":{"sha1":"10:68:A1:B6:6F:BE:E8:57:8D:53:84:02:27:8F:E5:B8:83:ED:F1:68","sha256":"19:3A:7C:96:C1:4A:DD:40:D8:24:D5:6C:D9:2F:3F:74:1E:19:64:E6:F9:D4:88:68:56:D5:DC:1D:17:B6:21:BC"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Apr 2026 12:46:07 GMT\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-04-12T18:10:44.672422Z","times_seen":20733,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":216,"dns":1,"connect":31,"send":0,"wait":49,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/api/is-banned","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buttholecoinmig.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BC7dKt%2BsesnAdYLQmyRwDxxdvSwENznXj6yZ0vZUljzyqzGH6TnsLmWtVYAm3lSbux6%2FCHCYoabtMKRFXRUWqb8PUmgNM96LAqyPMPybMGR1u8npfm2m0Snaf1%2Byprm%2BYFD2FhT7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254fff8995690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-04-12T18:59:28.277222Z","times_seen":104626,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/S7tFHE63_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /S7tFHE63_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1959\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-7a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwTv4UmOJtLjjKULsGBCc3YFftphDr%2FtA4IESRjL7nkZPdBz4QCX9XHyxkCvXv7swxI0YOuV6pcMdWoHalSaGwfwysjl4bqOHfHBv1bgczld9XPJPcbaTMjHXFEQrWcOEwg8KJFH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f9695b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"f575fd73519280acc4802787bf79e9c7","sha1":"d1aa3dcc7058d2da8f3b58731b53013d4d09c22c","sha256":"cb46238ec53da08f5a632f3db678e51be86409a94359fd330da88da92e2a7120","sha512":"7bd03ae7ddec95ce32c662f36befc33d1f1498b5783fcc0f64358de56c1a57b70149b03cdf4e6db7c69a9ae01f6790451765a3cd02b735c4dadfce032f31e184","ssdeep":"","tlshash":"9341a85277e54305c91c1e3544e44b75f71a7e195222a7af70cea97d376e0c04d206ee","first_seen":"2026-04-12T12:46:37.034685Z","last_seen":"2026-04-12T13:13:04.966809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-12T12:46:05.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGAeku%2FirE0iv0xJSlNgziNz7SHWu1902c%2Fv0bsOEDfBusEUAOpKCNTlqqV%2BD5Fcr2%2F1MXHPZLmcOtEDGlqyIGOF4nLtqgBNo%2Bg9h4%2BZk9k60WKi2Z7wEH2ZGnmr2qJTxy%2FxpoEZ\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9eb254f65fc52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":47427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34947)","md5":"9b627ead5b5fcf741dc12c99a166b6e3","sha1":"240f65d5a42b8a42da9a26414b08c170486f89e5","sha256":"244d7cf9c29828a96d1f3e5bb99f67ec2c3d06a82779cddc1bb3d8954748e98a","sha512":"ff08d82ca8071ed9f5cbea8f7a23e1cdb422bf262e93d7338a526b70ce3e00daa8523dfd2946467d48a7b839dc291f6d9ecba09bcc06764a8405db04b2cdcef4","ssdeep":"384:q0Af5zYX6k3A6wqzvbrOpttThlDWDtDjDjD/DtD/D/D3DtPP8jWg:q0Af5zvm1FmJTh96VXXbVLLTyjWg","tlshash":"bd237321d38103002297e588bde2d74f6379c30bd24646bd77ee25eae78d0ba52d67c5","first_seen":"2026-04-12T12:46:37.035582Z","last_seen":"2026-04-12T13:13:04.94307Z","times_seen":2,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":85,"dns":66,"connect":3,"send":0,"wait":248,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/GR4VOP4Y_normal.png","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /GR4VOP4Y_normal.png HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1351\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-547\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuXN37zoSJlk4H4vNFeZuk4TfNoWdGMXp52wzUvXPGg3J7IO0Ej%2F6l8FWlYQ53%2FwPbMNaKOxBB0cRKfMQCz%2Bm0nv62NhN1ZtaeALGynYYNbVgmzqsAQU%2BjgC3IAKMZDIq%2BO%2FElAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f959475690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"88fffd9136148b0d64bc709477588327","sha1":"a927a34d8ec3ba897ba81d6c62b222f9d799c04b","sha256":"22f3e61f1d2b73dd851bc1e5d4828de637fb8f3e1c51477a6dea55cd702488b1","sha512":"6733932b668b8176c2cb8d83fcad3c90d4514ad6949de78ee9bb81cc88fb62e87d3ffcb684cb175191b13d0a088fb70fa25f4e5263bc6e3a80b308d125d537a3","ssdeep":"","tlshash":"1e21d883b998fb99c6c8d4da03f17413a07d60eb1231a850349dd5d8d74baa659c2823","first_seen":"2026-04-12T12:46:37.036515Z","last_seen":"2026-04-12T13:13:04.945903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/dkCklM1b_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /dkCklM1b_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1959\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-7a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48h6SbHuqk5slzJv1%2F5s7Ehi8AkB6XktsArdTsN3sjLbXkQd3VUEGfrDxNLuS2Qvpj9j1ORqzN%2BvO5XVTEw3EJ19inE1%2FIanuEW%2FTNxdWqT1TuE9kW%2FV0jSA05iqTlVatrU4p6L1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f959495690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"1a07a64b8ec1ebbdacfd5d4b5c6ca43c","sha1":"ece1c3b405bc9a08baa231f597f32c691cfb1f23","sha256":"6c844f6a2bc6556fba193e9f97290b4b1cb2c3a27d38d5cf6af06f9a1744bcfd","sha512":"5899064568435c15e616f84527ff43ef9d95efe0e2918ceb95589229b0fdf2feee4570a2be3f551f31b9face73cfd0df660511eb7324bdad3e88aedfd0f2123e","ssdeep":"","tlshash":"1f4192021b64a706d82f1a39045017a1f3be7f3299d28baff0ce19197b3b0c14d9826a","first_seen":"2026-04-12T12:46:37.037411Z","last_seen":"2026-04-12T13:13:04.947918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHd6WKinsmjtBkBtTN1E0Jf5iamGoNV7d9ZI3MdEAU1dhBR5DmVB1ZVIAA9hyypVEAF3zp6oU5Ctfsg2DpWIyRo80G0LFa7IYM7OpYXHmxhwi9dDX%2B2cEEd5cc8VfnvFJsLmAuH3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254fcdd195690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-12T18:58:08.670197Z","times_seen":485660,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/api/visit","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buttholecoinmig.xyz/\r\nOrigin: https://buttholecoinmig.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:08 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ba5THB5iJ1eNQ9SJBEoDjUTScOS5a4CNcBguwBgKhO%2B1qTITpDvmuJKdhtdRzPfReiS5q4tIV6iL3oSOrs1CTm7gUp%2FQIPqT2%2BLUHN95jR4cCVwNkpv%2Fcu%2FwLFiPBlWwGDUE2ov\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb2550119965690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-12T18:59:28.279108Z","times_seen":394718,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/index-0HO0-45T.css","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /index-0HO0-45T.css HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzBoyvUFkR%2BS79XUSfZ5eYSHIGCYS4wBwRutjapsg4BUBftOhN%2FjJVmRmcgchNTFBk4K5oHLyuFIVwGgiAJOPAMQY4EP7%2BY4dxXhPWLI5c6cLzrsSm1UyJc5SPhMJ3fHbHsGkDD7\"}]}\r\netag: W/\"69d1d350-48e\"\r\ncontent-encoding: br\r\ncf-ray: 9eb254f939265690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1165)","md5":"f7912d8a24a9962f980bd3fd1ab7f24c","sha1":"e40549407c9eb4ed339c39199662befdba4f448f","sha256":"adb4bb9c72eb2314d349df1254191238631a05cb0a9ad583b68a3c44abc9d1d2","sha512":"a66486f4a91bb6f52fce418524caada08b6b35ddf44d430442ba8b3b8dad12a82b76c31b3dd52d8fe6e09a46d572082875ca79cb0593f7373b65b6b0c39a3b68","ssdeep":"","tlshash":"cc21dc1399d8001db1a39991bdc2835e713c0657e2220dadb3ba28e0df42cee82f6902","first_seen":"2026-04-12T12:46:37.039404Z","last_seen":"2026-04-12T13:13:04.975106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/pcQU0Han_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /pcQU0Han_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2187\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-88b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXeVk%2FbbJYvD9qmECPyfLAzWOphGSgPR6ZYbQBxLTY%2F8uaC4IWyHGDbvvvGIS3reaEusV%2Br7jtx%2Fa48qfZh2nuQScrEWHHKx3wHkNLS8ZjBoM%2BupGep3mntxfEeRpj3HVzg2Fckq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f979605690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2187,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"2505951c423dc22593c3c83faa49745f","sha1":"e2f307fd2a661743ffa7cd91a1d57ba407a58881","sha256":"2066ee7c1de2f2839de028f8a9aa1c1c9b8d92ecdb59f7380e0953d8424252d9","sha512":"c5bbbfd26e353ab75f3f224e38bcfe6e39e9853c4ac06a9e567edc3720c58235124115362a70e6ffe9deac81d1056b1731a31bd983a44677516556c4f7143832","ssdeep":"","tlshash":"c641c66253a99708fc2c2f7448843321eb15bd366bf6b7a770bc391d77380e58c0868a","first_seen":"2026-04-12T12:46:37.040348Z","last_seen":"2026-04-12T13:13:04.977546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/1WZyKjex_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /1WZyKjex_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2263\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-8d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FG6ZxARcuHdQvNwk1fw2Jg0oKbNKwQSCIuVlyj%2Ft1lBL6qtXbC8qyLOw9lgDs3HrauJjfRUEq8oyvwsJo6DL3b6hAYIg9TQ1cYFCVIFJmB4veuiL4Ies2a12OlGlwM%2BGHPFfQjB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f979615690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"d09b1f184209bba4357e244afb9cceaf","sha1":"a5cb608f2b65dc96ed698e0d4322730d4baf3034","sha256":"5fd5f164ffa469106f218db830f81839acaf4a7676441ca97559a6d1acb4915c","sha512":"dffedbf0cc4ce406a59171d5c0a42a3637c93b9775b9bcf0d22a1ca0744dd3531a6c5a61e46dbec39d44da06e639d6d8334867ae8be10af25b1d2c70a36f3216","ssdeep":"","tlshash":"6141b81107b59a09e85f067ca0c047a2fba53f61458e938e755d052d6f2e4c01dbc39a","first_seen":"2026-04-12T12:46:37.041269Z","last_seen":"2026-04-12T13:13:04.969167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/favicon.svg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNQy0FanzxpsDTLDteYOzrapPgQO158w0fADAnbrK6qR0vYbBVkyM%2F9c1ncO0WVE8Z2jm2GEEYjtVyxXnPfzWvxlFDGMBDG%2BhjEGkj7p4plIruvPu9d2i%2BPfbKEhAGtYfociFulT\"}]}\r\netag: W/\"69d1d350-155\"\r\ncontent-encoding: br\r\ncf-ray: 9eb255037c4f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"048dcbe70cd9e43220c3b02e0ec9a679","sha1":"f529eb13657043ac0756f4939a9cefe309568a0a","sha256":"cdfac9ad83882f780d6bb958f2f53da9845e616b1c1900f6e22424376d56db54","sha512":"71b2b7ceb6af8e031803a5b5bb0d36f66fd537dea7fd3f031a7805b7ad8a132102e56b1555fd9a88546d4b0824436c4f80620e8ec45de33921c9b06dd623f109","ssdeep":"","tlshash":"79e0862983185d3a9754854caf6a795463bb90c7130d62a164413e3ae015abf3dff1d8","first_seen":"2026-04-12T12:46:37.042184Z","last_seen":"2026-04-12T13:13:04.97229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/api/config","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buttholecoinmig.xyz/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2GIkBdOh%2Bmn6XJMFlJo0CPMuvOROagq4ASttIgjP%2BtyAYuOAT797%2B7KQqlpnIQ66y5hdOxEdWe26iEqwTcnGFORg3NNTn4sSa2FCP8KyQPl%2Bz%2BhKItut6iLmiPEFXMZnW05I4rV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9eb254fff89a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"856566f7b9fe4cc9638141dda9f414a6","sha1":"932fe591acbc3ee3936e2b33c439f22c636f07e8","sha256":"64165f058ed23e78d3eb03037d0096771566a51a1c8f8c8ad9cd1b48c528f877","sha512":"7ffc7753152b75ce02f6c3b6a292e3b88a562ad8d3fa44444fea1fd0ab2deeec159df991a6ff8d71bcaf5e399de10528c7e7b1deb7b40fc389906001d97f2d70","ssdeep":"","tlshash":"2fe02de742c343250281f20ba240f35878810e8282d44022e230ad486b4a20e732f96e","first_seen":"2026-04-12T12:46:37.043818Z","last_seen":"2026-04-12T12:46:37.043818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/_nuxt/assets/index.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 05 Apr 2026 15:00:24 GMT\r\netag: W/\"69d27908-e4c6b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXifIPkZv1cCNZnZYtTYcF%2FJkUXUZk1UTkgzLl0ssSV2KyyeiP2eyMFWeRiVpW0L%2F2zIfdVtHyF2tkVCYcr4uOyzG2hA0yZlhNsA8gi%2FIB2EhuLrMWt2bRu7AVkRByv%2BG%2BROjAMT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f949345690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":937067,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63334), with no line terminators","md5":"ce95ad05bd15468ca93ebe9182182db0","sha1":"cb2e58233ff01471a0158177871071c067159a3a","sha256":"a435bfff972de1436b462d8fdf84fb674f7027778294143bde95a73a0a378d6e","sha512":"69b46f09e7f888be066518f2af183dbdc177c020c1ee9373c2590ce307e0d34663ee7e8e952bd57d93252f1698c14af35ff6d4ddfc6fb254c99cee3a5e60cadc","ssdeep":"12288:7qxo8hUvftg7EboGcu1JfHn1jgTRboQYRClsSObZw05//4j/YWY5hSxAXy6:7kOvftg7EseOsD52j/YWAXb","tlshash":"6125b37f237ce352219868f82ba15c6414ca71e2db8e07fb6246e84dd4e356fb311da1","first_seen":"2026-04-12T12:46:37.044799Z","last_seen":"2026-04-12T12:46:37.044799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/beeple_headshot_beat_up_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /beeple_headshot_beat_up_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7190\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-1c16\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TogJx9wv8ZuOS1IDMEew%2FF%2FVCbhdWbpJPXW29vrpIIcELs6mrvb%2Fi%2FVKbhFv5bRzOlvd4F2Wq1z6uTb9PT%2FfKDqg2d1fgg7KsSSAyV1MghAb%2BoHd3ScLRsp8SW%2FqAEClHHM%2Fpi7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f969555690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 48x48, components 3","md5":"e6373787ff7b3923c6ae364d43ba848b","sha1":"98861185bc3b393cf17b253bf75585a547242e9a","sha256":"f65b96dc4f1988b6a80d8682324dd5a5c664414bc58c87ff955b342617ab240f","sha512":"34b1cfd1ec765f3559f3f10c587c5a503a5e61f67cf75a693390433d0fd164b5cc3e14615ecf8dc8ca371852373386d908f996c7c4a68cd771fde74630490ec3","ssdeep":"48:ZsDB22YiZ7UuZQrojUDdkWi2NbBmxR8hY0OD8MMLLdSQTVi3j/OiL:Zsw2Yi1+ogmXkbWR8m8MGxSQTGaO","tlshash":"2ee12a115fba6433c436d732b3d2826a8360a3254d178838b94c5309fb9d2c1ae58366","first_seen":"2026-04-12T12:46:37.045698Z","last_seen":"2026-04-12T13:13:04.952283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/gKlwzED6_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /gKlwzED6_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1959\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-7a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxVD%2FQeMrwd2ZAT6HjMYxcAWVFAAnmni2Kk1grhvYdEx4EHgM%2BHLi5SvGOfAW%2BkyfZH3OV6UQVMbtFw4VcV4N%2Fn8AlWuz6%2FXRFtGy4w6tFRwCGF%2B3nB0PKKFIF5Ht8YVe4YxisZM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f9795e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"2ea8cb49f662bf86060f57cc3ceff3a5","sha1":"fdbb9fb5ac287410205ed38b1654b94d4dc4e8ea","sha256":"60e8505cc2c707bdb05c10918f177e78a56cfc79a0e3a00b749268adc9cf1ba8","sha512":"cad6028cc774fabaf13ecf1b4c80028646b2f67418fa1052bbd933875953ee041ffa480c62bc2b8e1725b7343cb83a9a0d287a5046923c7dfa59f2dc8bb45a56","ssdeep":"","tlshash":"d141d4652b58a70afa2e863812f40b01f7263f26c98bd71f758d45097f7e0c108542e6","first_seen":"2026-04-12T12:46:37.046622Z","last_seen":"2026-04-12T13:13:04.979147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/CboMcTUYUcy9E6B3yGdFn6aEsGUnYV6yWeoeukw6pump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:07.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /latest/dex/tokens/CboMcTUYUcy9E6B3yGdFn6aEsGUnYV6yWeoeukw6pump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buttholecoinmig.xyz/\r\nOrigin: https://buttholecoinmig.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=ZzRQAiUZWM3moJ2L2vUry5Gi5FsTVznx7XXcsUUV_5Y-1775997967.5695038-1.0.1.1-vZ2nU0kYNln9FhUDm0TwcAvS8PdOzg2qfE2PdskYFdzgd39OAkUQzGvP.wgq2jUswJC.5zq0YLlCCm3M9VDfU3mjdu22YO_WEV8RFe4YM9Kpme_Gllz3H5ktAGmjl1IQ9T59EON0J0YF83Qk5M1Zcw; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Sun, 12 Apr 2026 13:16:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"22e3-eqUJqfhyMhj+Me+spR19WFoPaKY\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Apr 2026 12:46:37 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncf-ray: 9eb255014c36b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8931,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0628c3714ac0f7ed8b0374847e1003c2","sha1":"7aa509a9f8723218fe31efaca51d7d585a0f68a6","sha256":"211aed0d2fcec7b6aedf3824f1a7c7c967774830b05b9fcdd76a26d97ad49f84","sha512":"5b73dae69244ce0302269ead6c1ce226bdac6dea6228efbaa7469d050115f0d96ac1d2d2aa0c909273722fe38ebd99e715cc57dd8a76f8975acf5f8af38d4fbf","ssdeep":"192:LvAhih6vUOLmktJvZ8Ch6vUOLmkEy8h6vUOLmkFSh6vUOLmkNUe3yh6vUOLmk4BD:LvLAvUOLLtJvjAvUOLLf8AvUOLLFSAvO","tlshash":"780296ff83ec7a6bc3545be554ca342c63a170438fac4a4bc584dd9e4498b5f502d9ac","first_seen":"2026-04-12T12:46:37.047555Z","last_seen":"2026-04-12T12:46:37.047555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":39,"dns":4,"connect":1,"send":0,"wait":194,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/api/volume","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:09.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /api/volume HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buttholecoinmig.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 12 Apr 2026 12:46:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaiZNWBtYXrR0wzimD0Bdhdj8etQjaJ2buh8CZXOnnk3iRvEeIucrtmn64oflN8rJEgDbE1xv%2Bq3cOIimYNGxtuxIcVq7hiphIItCKY6MGgzsFpC%2FhLoYjqAhTwOaSXT6CAMFENZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9eb2550f59a75690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-12T18:58:08.670197Z","times_seen":485660,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2 HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 12 Apr 2026 12:46:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm5eoQZxGlQah6AEg2Ys4%2FZpBhUBSi6zUbf%2B1vdpDzk6toEGLYo1FiVrR5HgyNCrhObZhVmZSklUOnMAYdm%2Fh5Vsbyno5u%2FhuBWwm31L5R2jJpUfdvn9e31LwmnmnLW2Dk%2BA5jvo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254fccd0f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-12T18:58:08.670197Z","times_seen":485660,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/script-h6506.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /script-h6506.js HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: W/\"69d1d350-2818\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gt2NDP7WqMNhalmh1vCezMXl3Ui5uz4Uwz33cSLQLjXN9gIuaBtFLmbpkb2GKBfNV8lQMaTLoEzsSd8v4gUdyHWDWg9uhpNQyFmGu7Ojrzi%2F4R15F0NdqJ5aFPAcpF6VLAq7UzoE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f9492b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10264), with no line terminators","md5":"856e812008ec7c145fa0343cd601a50e","sha1":"3952926479282375b0f07257ea1caf85eb61dc6e","sha256":"e67c75e04d84fa63bd9f19e1fc37b5db4b3acee26cc22ede7ffe2720e49927c5","sha512":"e012f010cb79ba174badf105225cb7fa35214c946d8d9713495e87651d83285f76afb8c7d3469282be7e5cef7e865c5687a2ee5abda8a67ed4398b6cb61fd457","ssdeep":"192:OGoh6/dZw+Z8rEuEW52UCBYh3SD0jMkW2dDjyaBwSV8uztFPmn6VdkzD6YBIWy7r:+h6H0wsiONVrtFk6VdIDXIT77BRRqM","tlshash":"5122d8693240343241ab55db22e68386793de049bb0380e075bc08e75fb5cdd36ebbb6","first_seen":"2026-03-20T21:09:39.651174Z","last_seen":"2026-04-12T13:14:00.925265Z","times_seen":13,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/bhl.png","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /bhl.png HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 103176\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-19308\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARk9xEaFs6nVU%2Bqwneg2MT160Q8Zz%2FXF%2BnkpKgP9f3rKxI60rx1RahFVtBMnLi%2FeTLWS3RdrKspX1Z%2BfryHR5vYnDoE2d%2BttXoiIJE6%2BQwnb6thj%2F65pvJ7DRsS4vWbUkFeLJ7AF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f949355690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 310, 8-bit/color RGBA, non-interlaced","md5":"b8b08c8f7906011c88b9b45dfaa24ab7","sha1":"cc4a45c39ffc97cec8031860fe5f7c3330db96bd","sha256":"7a2ed11e418543186d970c733ae65cb78948b3e6ff6c225ddfe43c41a542ea3b","sha512":"8ae2bf462fae122a13d3e36d07382b10f642c17f196736dc5871825745e69dcb83d4975bb4d85b664bb7948cbe7ccba875b361314bfb3a6275b0069218b410e9","ssdeep":"3072:RRc+14y0ydLL9JLdKW4gyVcRtPUKEXH04Vg:RRay0aLHd341VcRtPJEXH04K","tlshash":"79a312c14c688c4dfebd45e5700bb72bc35422ac8c7989686cc5a3a5a9d6f3687f824c","first_seen":"2025-12-20T14:29:49.48411Z","last_seen":"2026-04-12T13:13:04.976767Z","times_seen":3,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/eufbYMqb_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /eufbYMqb_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2111\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-83f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eySD%2FeA%2B3QRXpuFysQX9i3IxyO%2F002URsoikwBK4EeZb3%2Fc4e4S5do3pDP6zgWk0M%2F4giizvP7uXxAhLV%2Fd%2BHc91Qnnhuay8ANkHvy6mnkNUfKWIPrOboeCpVQIxu5CxzTvIsZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f9795c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"d71c7a884e86c185ba504b9c7d7f024b","sha1":"a94afbea30e4652b655e4732372d6835b38b94b6","sha256":"7e18ad71cc9d8987ef5e88f8990c02ade7e5266c0c5932149889816082cbcdf1","sha512":"7eb66647c4e4834ef77e137f60545fc5d32d47076fcb8f38e74b93fb1cfd8db466dba1c6107ab92a9f70b8cce57d4fbc317c3d7056fcd8ac0707491e6af9bcfc","ssdeep":"","tlshash":"f841e9631749eb0bf92f1e34a9c09b14e3557f31a59d8b4be9c81414afbe0d00e642ad","first_seen":"2026-04-12T12:46:37.050271Z","last_seen":"2026-04-12T13:13:04.960575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/Butthole%20Coin%20_%20$BUTTHOLE_files/index-DXmsxIWs.js","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /Butthole%20Coin%20_%20$BUTTHOLE_files/index-DXmsxIWs.js HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: W/\"69d1d350-144e37\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2B%2F2cmNvAkzVRSk6oiIVOuNKmSohipgXUlDYKR7vzM2lUPVuCEu0FSugUJ8vkivLrYBXtXX%2Fdza0QKz8xWVbzyFFmn0dOSKY7G51%2FiiTXJE2NfRLKCNbOgsc2IhYd5OmXa300dCX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f979645690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330743,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"81b100e1a4d4656e16cb3b6af3c0c381","sha1":"b8ec5176037e4ceeb9f1c9dab36a016895089273","sha256":"60a8fcf33dbd8d8baa1e206130abadd061e43df30746fbd5fd056b4869efbcb9","sha512":"6618f423e0934363638577a6ad996296a24cd83ec29c87fd7727935ab7400046d66160b052db377a859d6a8cb7abb5009a898a12b0703f81b764e9d681a2d629","ssdeep":"24576:y4+v9dqXic8g3pEAmhOhlwB6YBFhWZMe1JDWtT6ZOEaVgL8a:y4+v9dqXic8qpEAmhOhlwB6YBFhWie1b","tlshash":"cd255be472b560564a9394e6407b0143b2397857380cc4acb61ceceb79a5849b2fffbd","first_seen":"2026-04-12T12:46:37.053006Z","last_seen":"2026-04-12T13:13:04.962575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/css2.css","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/index-0HO0-45T.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=070mB8i69tJKWskH8abFAQ2ln40id%2BoDtklxSnadExrAJxZRjVGEpesPgr0WPzxWIuI2qbHL4wrgXZjkqdwU2cDSjdNva6XmWYpMgXpZyUE%2BIGO3CvD3R0%2BqocTGRcro1V%2FMT3KW\"}]}\r\netag: W/\"69d1d350-8f0\"\r\ncontent-encoding: br\r\ncf-ray: 9eb254fabae25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7258dc18751d776eb765426303d8bb46","sha1":"74ec9f76a9ebf9a224d6b6cf94e17f5f5dc1f5b0","sha256":"3c9d071a0ec2baf8e82d306d704cb7352651b915bd7370d72a402807f3a5f41e","sha512":"3acd5481e15f3004028e6604335c8e7fbd253340bb0d3ae62e75c83ccf447b248f9eba6a30a9b559b3a62cd3d7e31adaa91ca9dc6cc0348864b5702d76b2ea53","ssdeep":"","tlshash":"4a41ac80047e6100e6970cc56bce3f32ad9db154a046c9382ffe1069ae5bd646365b6d","first_seen":"2026-04-12T12:46:37.054274Z","last_seen":"2026-04-12T13:13:04.949549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttholecoinmig.xyz/JkkbDStr_normal.jpg","fqdn":"buttholecoinmig.xyz","domain":"buttholecoinmig.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttholecoinmig.xyz/","date":"2026-04-12T12:46:06.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buttholecoinmig.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 19:23:59 GMT","end":"Fri, 03 Jul 2026 19:23:58 GMT"},"fingerprint":{"sha1":"84:1B:60:2C:32:8E:C2:FA:C2:6B:41:04:B5:E4:DC:A2:FC:6A:91:51","sha256":"5E:70:77:AE:94:87:57:B1:DF:DA:DD:04:65:75:A9:8A:13:C5:97:E0:A7:3D:11:66:D0:50:47:1A:84:2F:40:93"}}},"request":{"raw":"GET /JkkbDStr_normal.jpg HTTP/1.1\r\nHost: buttholecoinmig.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buttholecoinmig.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Apr 2026 12:46:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1503\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 05 Apr 2026 03:13:20 GMT\r\netag: \"69d1d350-5df\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V3mJqvxMlOjXrSxF3nrneHLC5Bvzbh5yfazXu0bBAl49n%2FCBU%2B0lbNjYmkoQ6IDaRaBMwNI%2FJNCqWRwjpiOxC10DjhEf5RE0AeqtBmk%2BcF5qoh72myMXwypRQytKA38caInoC0F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb254f979635690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1503,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3","md5":"39662207af49cf7d2ae190b2c6c612b2","sha1":"1bf31b51ca466d5241fcfec383f934e7c4e9072d","sha256":"14f45beedad2b8244e662448437966c249f53e0ed60b683ae94280a4a8944d1f","sha512":"73cd5c31aa974d7c8de56c843b36518e849bcd042104e1bde5585fb3ad0d706b6a5c0c94a08200e1dd9f38119f29c156c000b9d23ca193864478149223b39672","ssdeep":"","tlshash":"b53163e223551709ec1d673460d08f55f6483f2087475f6f708f69253fae1e059885c7","first_seen":"2026-04-12T12:46:37.057313Z","last_seen":"2026-04-12T13:13:04.973887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"buttholecoinmig.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}