{"report_id":"677aa80a-3d27-4831-a0c7-65c295e953d6","version":0,"status":"done","tags":[],"date":"2026-07-29T06:17:34Z","url":{"schema":"http","addr":"buttcoin.claim-portal.fun","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"title":"BUTTCOIN - The Original Memecoin Since 2011","dom":{"size":82453,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32143)","md5":"b604ddc70643af25b2ee1763ce0e2ab9","sha1":"0d5e45a9366d70bc3a8adb93e5a07e5dbd32bb7b","sha256":"f4c622cdbbabeeed01f2721dd4d1e6bba4d29ffc856c7ce66203b278ac2ef88e","sha512":"6b64ee656105eb3cbd837d89579915d8f22f89d26242828d6205617edea3164ecd770345185b8ca6dbfd7cdf34a6e7a753f035eded3c158320b4b794c9452216","ssdeep":"768:QTzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwcG:QTzqyrYIzqyrYQugYOOyEsWBLEOg6k","tlshash":"d7838594f9a0593f360391ee52ca9f9e265170038907a78d72fc81d1ef86eb39db3518","dom_hash":"domhash539556d83cc03a2da0d124f86e12224e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"buttcoin.claim-portal.fun","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T06:17:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":2,"received_data":21564,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"buttcoin.claim-portal.fun","ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-29T06:09:48.197608Z","last_seen":"2026-07-29T06:09:48.197608Z","alert_count":14,"request_count":14,"received_data":631605,"sent_data":7324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"shiny-dreamt.data-repo.cc","ip":{"addr":"104.21.94.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-07-29T06:09:48.199697Z","last_seen":"2026-07-29T06:09:48.199697Z","alert_count":0,"request_count":1,"received_data":630,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9bdbad6ebbbd133c934040cb8a6ad5b","sha1":"d603d374ed67b4ecde1c7e201b4b41e1329ee440","sha256":"5acea54eea175e62fe005412108b10898d75bfb3acf92d02c159258cf5b1cbb3","sha512":"5ebd5f4ac702c594d669baf0b2370ae066dd00add484d5ac6e967f4f806e07548bce92ac8f0d7a1c77a1523f5a3ef2e3a926101f27c71c5aaf7027de4a1c1a2b","ssdeep":"","tlshash":"7de02e286aa624f925b338d2cb1eb282e86000735081c801fc1cf54a0f84e6838b1fc9","size":311,"data":"","first_seen":"2026-06-10T12:51:54.41043Z","last_seen":"2026-07-30T06:12:13.794717Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:07.992Z","timestamp":1785305827992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Jul 2026 06:17:08 GMT\r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-31T17:17:35.836238Z","times_seen":38763,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/dogecoin.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.016Z","timestamp":1785305828016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /dogecoin.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1574a732d9d11f3abf97cedcde9c0708\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBqlnpnBT%2BOgtuBUon3uWW0%2BiPcJQqGg%2FBdrZfyny4EGjf%2FeYin09y%2BNcmNjBU1KhskQ1yJHUDkuwRMueC2Gt3sSUbNXPFEe2MkMkX9H9vTxzE6RuyvZur%2Bh0XCQhCmnTsK2UNDyTSHMJbQF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb119970731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54531,"size_decoded":55207,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"76c40a0ba79d7e8c9162f3eab13675bd","sha1":"0407f05708acc44f79d43ef6d2843265e91d1dc6","sha256":"2b11878a9f57a4cfe1f2c8f9254fe29c1027c0183b211993a773f18beb1f4f2c","sha512":"eee11bedd17944b5385702eeb9643b8b72aba4d0c6481fa7df69420ddea65623dea29391ea466ec3b6759fa7e6dbbdec8944fbe65cdb6b24a53403a5ff2fec6b","ssdeep":"768:qPcnU+g6dpG5XrlDp8krz3YQAJmxJZEyjOaKm3lEv1wO5gieIS+84wwq0YIy9ets:c+g6dUrj8kXIwxJLBVlaJU+zPREX","tlshash":"1a3302ec6ef7e11de898237b0ecde5200cd3d76a9e94754b3f50a228d464836d2b110e","first_seen":"2026-04-04T16:42:29.043789Z","last_seen":"2026-07-30T05:59:28.331429Z","times_seen":16,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/coinbase.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.022Z","timestamp":1785305828022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /coinbase.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a3cc7a1c9cf7b97fd15b6b333b9f3432\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUuv3rcPduUlxmQpbYZY8Z1SlO%2Fyyf%2FGv8ntUTnN12ktPDPqXn%2FRMfipw%2BuE%2Bljrr24aWh1oPFbWGLn01iwkTrnh%2FC9PaC26UKymtvTQwk2PoIqswLPDKQ%2BJkZ2WF1Z19F9246OY3ttcs9Hz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb1299d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10580,"size_decoded":11258,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"04efaf75f1a3dadb0f108cb3e34f6990","sha1":"358be2e3aa59af47f6de044c5f0ace81f7d6c856","sha256":"373d353b696f59f46b168f2cf2006bc89b349204e87d564a25ee9f7e531bd7f6","sha512":"c9bd526af91c53b73eb1905d36d10c98acab6a8b6244a97a3d72ffde2c3a726e59571d03e898d161e3b39f0e98f62626f3ffb2b12e209b0acdc782e398489f53","ssdeep":"192:XvSYouDo7hvkFD8IC8EPFgXr1oVj/4Wkpe4gdMQA0EQv9D7UY8ay7W4r:/SNuUI4PFi1oeppeMQA0hD7UY/yz","tlshash":"4e22c0e0fd1ed882ee9162301f40039d5ec6ed4d614ae9771cbbf6d27a09dd8a3e8560","first_seen":"2026-04-28T10:02:30.911859Z","last_seen":"2026-07-30T05:59:28.324146Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/moonshot.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.025Z","timestamp":1785305828025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /moonshot.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"70549006f768a2acb7c2d5a04ae0f317\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3jNRfZQJlOf1jJFvEj7q8qRv9E18t%2BXNWC4nrhhS6emTfLH0Tdc54jc0zJwwlpv50Hd4CvzMM9VJkj1ylgzAgtpaXkbmUjZnFBzUMLzEmN1TZuUb%2B4n2rzFE7MSFF2VmukZ3Xr5iBoUg8bR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb129a00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 163603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163603,"size_decoded":164272,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"57fd61189d752d573343323364b4a6ff","sha1":"bb034b396d03233fea5a376d40fecc3551fe4e34","sha256":"cfa33eb0a697c1a399d8c037564457117c93e28b744cdf018d813d775c0c97b7","sha512":"d08c46f8e10f6e82cca11bd13f01616d50e95a6bae7a364e8c9f20abe383da5719b8d3304ccd772a2fa2fe5a3027cd87f361e9affa36d8e932cdb38215f383db","ssdeep":"3072:RH/VZgmNBEWL4s1pW4a1JysCKJkDe/FbPptENBjTref2eTyhvnvUA:FN58wW4a13TS0bB2NBj3e23hvvUA","tlshash":"acf312f89f9a5f13aa5cca4e55a72afd38f80d132223520723fdc854934fce52649726","first_seen":"2025-09-30T16:15:35.899295Z","last_seen":"2026-07-30T05:59:28.32899Z","times_seen":357,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T06:17:07.503Z","timestamp":1785305827503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:07 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zw%2BmptJxp2Z3zz%2FxprRo2pea2bMLUVq1PBVQkaKe7q6dyUnq3lJsiNhEw3Q02WtgabkH947r8TiZDysAqtjxAC6qSp0WJYNwO9SScWno7dSp7Za%2FLhQprdkEx%2FdVNQFa5UzEs91u6qv0YVVN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a229ffae393e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":81873,"size_decoded":15691,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32121)","md5":"8d468a5b2077bb549f03b38fbd2fd7bb","sha1":"c1409d80ec4fdaddce24dfcb16520cbd829ca267","sha256":"a3aa67187192a13d4282df63163a0c6fe5b67f0187266ff2d26b1357672039f9","sha512":"5c89da6234a6746978796973d0b8cb8dd1f4d2246c17d75076d890c062c78e5e6cae616c231969fad45b62f14e06014a17bb098ee687d520fa9b9830038dd5fd","ssdeep":"768:/zQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwcXl:/zqyrYIzqyrYQCg9YOOVEHWR/K5gek","tlshash":"73837594f9a0593f360351ee52ca9e9e365170038907a78d72fc81d1ef86eb39eb3518","first_seen":"2026-07-29T06:09:59.225229Z","last_seen":"2026-07-29T06:41:38.409051Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":36,"connect":16,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/style.css","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:07.999Z","timestamp":1785305827999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\netag: W/\"aeca3871ed0e3e99f48ca38e330e0f88\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VksZd%2Fe51Y%2F9Z38H1I%2B60qwNNFT%2FlwiN4VYCoYFf7HH6CI0qtuxd4N9XzweIoHyJ9ebJqDtJnzAPMQS4W%2FaE1Eo2bPwOqFfzkryAEoDt5RSN3wqw%2FqzxOreuJ6eG1Y2GFlhXnwHtqiDgKtrU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a229ffb109920731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103650,"size_decoded":19988,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d684ed321bda1fbeaa4fc9304d194fc4","sha1":"6783b6a595f5465e9d5ecd629981e9387139fc9e","sha256":"d818f264b4234309d0de4a259c6de8f5dface0b8381d02f5d98c07c411af22df","sha512":"b2a182779be998bc6ac13a5846ee14dfaf715ae8d5846b0f63f047ce569faa8530a9de9279ab38cab1e889183a6704d5c5635bfebd9908fd75b5398e54c2d10e","ssdeep":"1536:aecEVLPjYYmuIaIhVLfmMP06+QHqOSnVSsfHBPEtOlhIHF2T6HuCZ3b+r1mNViM2:2eEPfSJobS","tlshash":"e4a367559a6315b47c27e6682fef4749326d9003c90acc6c7bdc61888fc93fd9692b8c","first_seen":"2026-04-28T10:02:30.870695Z","last_seen":"2026-07-30T05:59:28.32353Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/buttcoin.jpg","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.010Z","timestamp":1785305828010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /buttcoin.jpg HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"21aa4607ee7e9f8795124770870d2260\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icVOaoLpibP3Ybym4k5StjIT60FuQ5551jZkL2EM5XNvjJghdhbcTstpnJ8Fwa0LfqilXrt9PAhTDOy8gQ4Cs8db11pFwUJGd6icGtCnywfWICqTk%2FsIJqSxQDZTL63cDCbBqs6qD0MWtHFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb119930731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29752,"size_decoded":30419,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 500x500, components 3","md5":"c64251749eb46096256b6f81603cd776","sha1":"c72bee02afe40b20ad86a6d3eba69088284b6698","sha256":"963a4ed00b72f5e8244f1f871f72217576b72e3ab11ed5a7e8ba923af9d4c9af","sha512":"16e795979efa218b7f0124e94116ba6794a5147697ef8c8076a560ad0b72e2dfbe98b5e41bc23bc185db01661f23c28d878ad35e513aa886803213a9834d79cb","ssdeep":"768:EQ9wPEi7kx3x77kZwSh32Yjmn1Soi0vgfnAH5A4Xz:59Qkxx7U/9bm1Zi0iAH5bj","tlshash":"7cd2f2c74b19a263efc58637602f8b5a6e374f42d91e153bdd3581f204b2622b9942b0","first_seen":"2026-02-06T22:25:11.030331Z","last_seen":"2026-07-30T05:59:28.332019Z","times_seen":341,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/original.jpeg","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.017Z","timestamp":1785305828017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /original.jpeg HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"005c9a11780296d96700c6d27417ac8a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WNeO%2F8ij23MpZolgWpXu%2BoHrtxBl7YkZ6SRazAImOPDMDCgVqAjjdHUz10d99%2BjRavImIgKpz3EcAIGNSo7%2BRd%2BXoYODN5hAjlQ86VyXO5LPxodnpo7G5saVmIfFTvUn44xBXrDS2R1yuqq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb119980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28436,"size_decoded":29111,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1086x280, components 3","md5":"a9077b87a9f57842ff352032226fb840","sha1":"bfdf0ff4970384bef17b102c974fc735cb4505fa","sha256":"2454a580517e4a76f2232a510af27b05040986d4dd572b95ad3affe686eea877","sha512":"781ca67bebd40498185433a4244772fbbbd5d06dc015a0323013bd82fbfaf35dd0c7a352f8559a22979466ec9ecf9b80ea91d6cd354ab8a0b83c5e24776cc9f5","ssdeep":"768:c397s+3M9wqiWjrb0YxVNAl+w5EiCBNtnz23:cNw+QwqNb3+paPny","tlshash":"bcd2d0acda956073d9480eb240db1e7766b33d061f1e550a39ac27b29711448a9d13f3","first_seen":"2026-02-06T22:25:11.041237Z","last_seen":"2026-07-30T05:59:28.330286Z","times_seen":341,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/fomo.jpg","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.018Z","timestamp":1785305828018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /fomo.jpg HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e0e70e36817b3e1b7e9ade2f9400f0d4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01aaeHmb0%2F4B6X7ucLVQHQmgJO62fFp6qG46rPRcdxq%2BDt1nMR7czMXjoVyQS2Dx8JO3zGy%2Bw1OIll2A1ogKG5bzW5Qj%2B6DxWc5V4RImH4Vk0hp%2FRccPKP7VLipqSF9AWSJ3F4UbyGTIKEYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb1199b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7735,"size_decoded":8409,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8154916bfe70849a70a005c3db53e6a0","sha1":"0bfdf8886e68f2ba23855816bbb5546ccc88aa5f","sha256":"5f92362d6675ceb4e25d8d462a97b5759dedfea9e1a43be9e348c20b1dc8ecd7","sha512":"b33df49f0111f003e9be4872bb21d3f671b0385b3cb748e700942fa59d250af8f5b8a975b9b4de86df28bd77dd4c3a8ea468117fa379a307f1c785b2364be1b3","ssdeep":"192:sMFQaqfX7Cln5nnnnnnxBF9KHLXkeTkvq0R3P4dJR:svDCln5nnnnnnl96XkMky0JP4jR","tlshash":"00f18df293842317f41e4571b09adb68cf06ac6d516ecb4b9a7070b1772b0829c1925b","first_seen":"2026-02-06T22:25:11.033108Z","last_seen":"2026-07-30T05:59:28.326005Z","times_seen":341,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/buttcoin-logo-text.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.012Z","timestamp":1785305828012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /buttcoin-logo-text.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"24ddc63cc93caac8374bf9a95be71531\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUwLM22ud9V5CzMETBlgPsv65R2ayv3U2ZKXifBy2aiYsS5xaHDkaJLj2MWRchVImtaoVtMvQdvtIlzohb%2B3wDSk5CgVpOlfKJZsv1SiNLMcAw3PMYxhEXN2DIV7T419ugsRMK2bLYt65scT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb119950731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8306\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8306,"size_decoded":8971,"mime_type":"image/png","magic":"PNG image data, 441 x 94, 8-bit colormap, non-interlaced","md5":"cb69696f9c7f2bf6e479ea073a09ac89","sha1":"5aa93fa4dfe2bc4448b7ec90ae26193bed3627bf","sha256":"a691785bf40cbf6958337f527c327b5dc074359608362e5acff21e3a5e148af7","sha512":"91cc187dfcc1f9c6408bcecf524f8d93f7ff602755ad8a63147a6374a4b7c0552ab2e8fd1661459673a0c8ff7ca421860df32bfa103afb0a6c5c205af65d5a51","ssdeep":"96:4STKAvqsvg7DI+Nhl+7nwUIeIUlzQLMA2BjFICFO2mJh1OAmawlOp4RR3ITvChll:4S7qQI+LSepULMvFS93MtXMQ9c/GH","tlshash":"9d02afcbd0b71561ea87367b0ca7c8522a2a9eaed4d179c4c19ded02cd12ab86c71c81","first_seen":"2026-04-28T10:02:30.902801Z","last_seen":"2026-07-30T05:59:28.325348Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/Bitcoin-Logo.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.015Z","timestamp":1785305828015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /Bitcoin-Logo.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"10e5653f2544111a707d04b45877e1dd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8XCy6u4WTj8RcSMj5uc0BoLQOBzPc2PUIL882IXCTi0CkDnFgSs3Nwa0TZzxnGiS0%2FNEjHtIdF6ZkyDdBh7H3SoAxoW6E0Utie8y9JqVuTJ%2BgZs2OT3jJoO8eQTAIMpr037VtZYamqtNUWq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb119960731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26571,"size_decoded":27239,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"4ce03bafbcf2160241912485a2f8e1c7","sha1":"3eca5dba7cb305da862fbca10731d3c702be76de","sha256":"0bc60498cfee2a43b773da5dae0d5e5f999a46eb9ac7913e6c0f7bcf96e0c554","sha512":"c25c89fa52937e9cc6d195fd50e605764a1c5f8649e2eebf989e2b18d544a69b8c890d317e9e111250aa596dd1ef800ea2e30838446b1dda2b29120280694f12","ssdeep":"768:TdtvjVz1XI31PGVAY2GDPJFEF50iJgkO5ESXBzMio5:xDCFPGmYNDRFE2iJOwio5","tlshash":"68c2d0ded59c36d3d98be078d93c527ec532509b1b8215a548372f8f893d21088ed679","first_seen":"2025-10-04T19:43:06.039856Z","last_seen":"2026-07-30T05:59:28.328443Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/pump.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.021Z","timestamp":1785305828021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /pump.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2883ede37abb8190918b9771ff806d8e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0KFsGfN7EqUn0d90AE%2BNN1cEDOBI1Sps1u0b%2F0svONFUAs11y22TYiJCKLcmtuxWAYC2EIYnPryQ9pJbXED%2BSpudG2tx2cJlze2jngJFMCZuPaDk522kZDJqgbO8Zh9c1JyoDtWJO8%2BTnmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb1299c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47713,"size_decoded":48385,"mime_type":"image/png","magic":"PNG image data, 1271 x 1314, 8-bit/color RGBA, non-interlaced","md5":"c4e83ff71a9d991aa1fa80927bba3040","sha1":"250be6e21cd0c68c77514f9cd4597708768659e3","sha256":"75f4c040dbe64a29f9901b9de7ad4d2cebb07f05c2130f67cb7b6db86a8fd8fa","sha512":"0ce8309e2fe0ff4ee579b74da7e7438652ef82fd75890870edf30c7465ba1c6602aea23f62b5eedc8e08f39bd5c700f08d3d222d66a2997e1c7c480b873f6bc8","ssdeep":"768:ov0RdSEAHgLKJhHxF/HBCwqEsL/MJMXxCN5c7u2UFYFtus3N5JLUtwL/g2dDaCM:ov0RdSEDe5H4fhCN2PUGFldXT/xdDu","tlshash":"d923f11708871aa0c9dc53be7831a37de77ca7a48122c999024eed6730b5dfba7c50e5","first_seen":"2026-02-06T22:25:11.048573Z","last_seen":"2026-07-30T05:59:28.332571Z","times_seen":349,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/buttcoin.jpg","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.415Z","timestamp":1785305828415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /buttcoin.jpg HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"21aa4607ee7e9f8795124770870d2260\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvXlntBRjR1uvdoRXYBDQRmiegHSnfu2xtPDCIe6ej0MuNZLII10jrh1ye3YsIneh50kKAflOie09Ikx5CBHQkYGIXN9XR2hX0qDjaK3D4zibWTymNwPe4hcWtNrab%2FqqqePZX5cI25PngpZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a229ffb39a7d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29752,"size_decoded":30422,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 500x500, components 3","md5":"c64251749eb46096256b6f81603cd776","sha1":"c72bee02afe40b20ad86a6d3eba69088284b6698","sha256":"963a4ed00b72f5e8244f1f871f72217576b72e3ab11ed5a7e8ba923af9d4c9af","sha512":"16e795979efa218b7f0124e94116ba6794a5147697ef8c8076a560ad0b72e2dfbe98b5e41bc23bc185db01661f23c28d878ad35e513aa886803213a9834d79cb","ssdeep":"768:EQ9wPEi7kx3x77kZwSh32Yjmn1Soi0vgfnAH5A4Xz:59Qkxx7U/9bm1Zi0iAH5bj","tlshash":"7cd2f2c74b19a263efc58637602f8b5a6e374f42d91e153bdd3581f204b2622b9942b0","first_seen":"2026-02-06T22:25:11.030331Z","last_seen":"2026-07-30T05:59:28.332019Z","times_seen":341,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:07.995Z","timestamp":1785305827995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Jul 2026 06:17:08 GMT\r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-31T17:17:35.836238Z","times_seen":38763,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shiny-dreamt.data-repo.cc/_nuxt/assets/index.js","fqdn":"shiny-dreamt.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"104.21.94.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:07.997Z","timestamp":1785305827997,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: shiny-dreamt.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://buttcoin.claim-portal.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9SbIeCRvadKAmDJAyDYOMSmFs6W%2BeXS7LM8o1keiVwSp5L1yYmUwMRtPsn6Zdz5bsXBDOj6GDa3Kkmj28iatH2EVGcnzHfw6os7yeynGROflQqsAxESclqVA20doW54X7xTTLagxi3SsnqU\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store, no-cache\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a229ffb148fe56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T17:17:08.781886Z","times_seen":17637918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/mx.png","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.023Z","timestamp":1785305828023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /mx.png HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"852b3cf5d00732a1113df21f95c9e6b4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McQwqkuldszrdc6u%2FYrppM3Lgw2T%2Bq%2BLTLTJP3Rp5uZbhUnbxhc%2BfwAFxuIrgNdy3bZ4fBB9n325NwGVmNpz1%2FQpJE%2FVEkPTdU8qgI4YravUS8GY4PcWuvwFn%2BAzLtGe7ydtdi3fFT%2BblMXp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb1299e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23238,"size_decoded":23918,"mime_type":"image/png","magic":"PNG image data, 1245 x 771, 8-bit/color RGBA, non-interlaced","md5":"724efd6d7fb8e53f35ebb35544c21005","sha1":"a79780a2c3ab600764374aefd72ebd909c0320ab","sha256":"756240f6eb46686fe34ad93c678d5f0f7453cd339262d07eb64a5deffe587e0b","sha512":"f8db6f7c610682c8e64de8bdb8c5bdca1c738964ce14b096f7f373bb75e4a0de5ee863acb9c6c924be6a969314e5373290304426641a08b1d37fb07174aab58a","ssdeep":"384:8nySWNmBkFDlKQkIxfVH0QPlB2FsAmU0dkchRQjATkQ9xnCUN3pRgl1yDluFnvri:tSWNqkFxK6vH08EFshNlJpu3yUnvUGw7","tlshash":"a5a2e1c01858bd73552d1e479e1e98027437d2551ebf908266b9d6e3d1cb4efcaac18c","first_seen":"2026-02-06T22:25:11.036218Z","last_seen":"2026-07-30T05:59:28.326584Z","times_seen":341,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buttcoin.claim-portal.fun/phantom.jpg","fqdn":"buttcoin.claim-portal.fun","domain":"claim-portal.fun","tld":"fun"},"ip":{"addr":"172.67.161.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buttcoin.claim-portal.fun/","date":"2026-07-29T06:17:08.025Z","timestamp":1785305828025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-portal.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 08:32:16 GMT","end":"Mon, 19 Oct 2026 09:32:00 GMT"},"fingerprint":{"sha1":"FA:EB:84:70:76:00:04:1F:9D:67:C1:D0:89:AE:DF:0E:41:D6:ED:CA","sha256":"02:2F:71:7E:43:06:B4:85:A7:FB:59:BE:DF:A2:41:38:EA:AC:FE:FD:FC:5F:85:97:D4:25:1F:40:23:5B:CC:9A"}}},"request":{"raw":"GET /phantom.jpg HTTP/1.1\r\nHost: buttcoin.claim-portal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buttcoin.claim-portal.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 06:17:08 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e8c9a008f17fed86c3c4cc4d429eb950\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRPpUewgHClWSRe6J6XfiSV1z3OT7cekQJ3bXBJWc8g6MBsQQuuyakoGShj2fbjeuLIigfSR0KAf%2FpWyiJLau5WXb62tbvz1R3tcCc%2FOSjJJA57lgKFkyFCWOvDnWGfu0BjxAtu%2FY423%2FMQN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a229ffb1299f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6485,"size_decoded":7159,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e395c8ebfb9908b692308c317ffeaa22","sha1":"01dbca7cb99bc388ed0e232dad781b35527f1db0","sha256":"97f7fa29279ff539701360e9bd6641a02bf76ed6af61c6b5b1f087c2d6473290","sha512":"a8057d55904a6d042a97d533a6fe9bffee7aa64bbb3ad0d10ff9bb0b071df9a3d01f97e0f11d63ecd0f9a9c78303ea6c12704e07cb8f6b5100fb9ed6af539fe0","ssdeep":"96:X894vhLgcVcCwCcXSYw1nzXLhjTHMazZ/qFDKNByDjAZBw:sDciCw/CYknzRTsad/qpKao8","tlshash":"a7d17dd757809b2ac81d273c9ca80bd1ff956e23078a277be0160c191b9d1b1d89c6d7","first_seen":"2026-01-28T09:30:13.328316Z","last_seen":"2026-07-30T05:59:28.32732Z","times_seen":346,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"buttcoin.claim-portal.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}