{"report_id":"7478c245-f6f3-4307-a372-c8047aff493a","version":6,"status":"done","tags":[],"date":"2026-03-22T12:28:47Z","url":{"schema":"http","addr":"treasury-buttcoin.com","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"treasury-buttcoin.com/","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"title":"BUTTCOIN - The Original Memecoin Since 2011","dom":{"size":27694,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (535)","md5":"74019b80f4dbd34135251558607cc770","sha1":"77e57908857a3a87c0d852f1fe1dec9c7af37744","sha256":"e7c92ca60b9c94b8be004c8f03e7a3c72a2b8c747dadc4e8b6ce09b4527fe49e","sha512":"c9fa66557bd160356aa96f91b3f2dc89b88b1e733fa7ad64d282d606db80c58416c3327af093a5688f9a5cadde0a65fe4a89fce959338ca3cfb4f5b9c1011786","ssdeep":"384:0Lc5dg++c8HYRDjVD0YjG4B+/2za82dfY+5I8153zAtnTAjKahM:cc5dg++c8HYRXVD0YjG4u2+8B8uVT","tlshash":"15c252a095f0622702428080abb36b5f2f65e257de0b04b673fd07d55fa7f8add67108","dom_hash":"domhashac72f991df9f58cf822a205f25ccbb9c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"treasury-buttcoin.com","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T12:28:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptologos.cc","ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-13","domain_rank":572515,"first_seen":"2019-08-22T11:22:00Z","last_seen":"2026-03-20T19:03:35.243964Z","alert_count":0,"request_count":4,"received_data":2898,"sent_data":1828,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"treasury-buttcoin.com","ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-22T12:28:48.815145Z","last_seen":"2026-03-22T12:28:48.815145Z","alert_count":19,"request_count":19,"received_data":1659253,"sent_data":8768,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":2,"received_data":117573,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"treasury-buttcoin.com/isomorphic-fetch.dark.min.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c474ecb85bba2a2d2585b0f62e9c62","sha1":"9d21cee8f25300fa20e648995b4a3af55b5206c0","sha256":"e6cb2680ffbef771df7d52fe0460c974442b72696a101b3e7ae79b5d965850fe","sha512":"10e906f0e89a7c855fd5357eafd50516cf60af5c7692785e21ebdddf5a89a37d4ea86bba0172789fb85b055e7449e1af59bfe547ac86204afc8a802468ac135c","ssdeep":"6144:YTJTNK83usKoY04YAtHLXDB3JGT8udonKByxXmS6HSSt/NnIOxcI7YM1SfRGtLe7:ya0avlKBW6Hi4gMG","tlshash":"86b430466db3847d9ff0a13586b121989bd3f4cacbd7a916b5d2af4bd012800fcd6362","size":493747,"data":"","first_seen":"2026-03-13T16:27:24.111989Z","last_seen":"2026-03-24T01:46:04.941299Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c21470151f9ae1f7b070e1481a019b8","sha1":"6436bbc318587d70bce89363983ee8b8bcf5743a","sha256":"99b11e2f7929c87738becacffe561e3c6c967bd7f6c2e1f6830ea17fc23d6fc8","sha512":"b9a61469b69e0619ad5213aad5de6c7ddc57d41d92009986f8be224a2ba0aae7a96a972af8b4d51a96c08b82be4dc51862ec20a2a01869d6861b959044de8470","ssdeep":"6144:x19XN4c3u8KoCRi+vhqCXDBH78ZAUsrkJ4x1my6HYW//Nt6Qzc4zsI1AhxEtRO0Y:vqc+DboJS6HOkmwa","tlshash":"aea421126db384799ff0b13586b112988be3f4dadbd7a925b5d2af4bd011800fcd6362","size":486383,"data":"","first_seen":"2026-03-13T16:27:24.140712Z","last_seen":"2026-03-24T01:46:04.943049Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T03:23:12.928238Z","times_seen":406055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","size":43380,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-07-25T05:12:16.679375Z","times_seen":6649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","size":72214,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-07-25T16:19:19.424346Z","times_seen":8318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fconvnetjs.cjs.js%3Ft%3D29569708%26u%3DIv3vtYOUoptGAkSpGDY5MjU2NDQ2MjhjZmYzYzM0MDI3YzFlNcoLfPsM8k--lInn-g","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"treasury-buttcoin.com/","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T12:28:24.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqf5sFYYxD9ocj0Rkbx%2FObbHFXA3%2BBKnoFSrWzM7qmWOPeC6QrWHXqfV9VNo%2FrxyyBDLX9KF7pLZJXVUlrbTaOhG9DlTD24I%2F9tjgngOY77UPSDsbg%3D%3D\"}]}\r\nage: 701354\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e05322e5c03481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28029,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (535), with CRLF line terminators","md5":"a843fdb95f68b0b7c6f691d12ed47b16","sha1":"c52ce342fd6bff015683929058fc97ee15ef5d41","sha256":"395bb7b82b3a27b594209d227267b3a4a98591ab150fec1d1b507c8f46b91fc1","sha512":"bc6c66fd8f8a5fcdeb45dd3a4087cc64f08797f73a50af01ab44426619610794687f9c6ccd63a0e60b4cc409932d0ee7ec275ecd6708bd7bb2283ce66f342ab8","ssdeep":"384:Je+i1BBdoePuOjV8Zsjz4AbA2G28BRqFYzyP8kugUHKL4nGgmaY:c+i1BBdLPuOV8Zsjz4t2D8E8Ewe","tlshash":"f4c2506095c0a227027381809ab26b9efe658297df0b45ba33ed07d76fb7f08dd67144","first_seen":"2026-03-22T12:28:53.381641Z","last_seen":"2026-03-22T12:28:53.381641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/coinbase.png","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/coinbase.png HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 3587\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-e03\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDFhBs051OwPQuzJkPe2SChHSBWiNUA05aPnXWKjS5J81wpytJigknOw%2B7xVNiHU9FKCK6BVqr1IPm6OFuvgE5MLK2D1%2Flc4G7EkPtVdjLHtnB%2Flsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fdebfdd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"f9a4dd82df4c369df7b20da3a8197aa7","sha1":"e7e754550b6c586a8beedd4c8869782a31e9471a","sha256":"2f80d81605c2b4c8c073a6b792378592a2e7ae75e4384ae4880a22a23ed23609","sha512":"195338d446a7d766ad0be7f2c6eff0abf9b2eb9c8926a2097934e657fa9d609e4e20dcce712b79117576fbb833af51945fa5ea11bb0bebb6cc6defe73914fa91","ssdeep":"","tlshash":"c7716c7141b12cafdeae4690c90f560619d316543e4fc116b06f13fc3cbae8a187629b","first_seen":"2026-02-06T22:25:11.043585Z","last_seen":"2026-03-24T01:46:04.936468Z","times_seen":328,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/script.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3Zwlj%2FZCBOqLXZy%2FAKv9QieewCJ9aDm5niCM%2Bvzm2%2BA%2BX8CmEeLiFbHdz%2FOeF7dvsNyCKcXWNOgfKDPCaJ%2FjvCjUrq8CErZlvVMGk7bfsDQFLosPg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9e05322fdec7dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/phantom.jpg","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/phantom.jpg HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6485\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-1955\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jrQUqPVvkCJ4DeO62AmVhEcpSe%2Bb2iJcxk7uNjSlobqqnOhempZEWdxkxUkCh%2FVDE5ILWGwPUL7LmuVmxi0si3oKLa%2BxJEoiqJV%2FbzWw3Zs11tGsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fdec0dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e395c8ebfb9908b692308c317ffeaa22","sha1":"01dbca7cb99bc388ed0e232dad781b35527f1db0","sha256":"97f7fa29279ff539701360e9bd6641a02bf76ed6af61c6b5b1f087c2d6473290","sha512":"a8057d55904a6d042a97d533a6fe9bffee7aa64bbb3ad0d10ff9bb0b071df9a3d01f97e0f11d63ecd0f9a9c78303ea6c12704e07cb8f6b5100fb9ed6af539fe0","ssdeep":"96:X894vhLgcVcCwCcXSYw1nzXLhjTHMazZ/qFDKNByDjAZBw:sDciCw/CYknzRTsad/qpKao8","tlshash":"a7d17dd757809b2ac81d273c9ca80bd1ff956e23078a277be0160c191b9d1b1d89c6d7","first_seen":"2026-01-28T09:30:13.328316Z","last_seen":"2026-04-28T10:02:30.915509Z","times_seen":334,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 22 Mar 2026 13:16:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6apyjp5Q7hHNdc7Ffb2ppa5nQEzA7%2BMUhDHb0vAksLMr1YvGUHRpvTrYsS6BOa6RoWDN%2FyVu3xmHbmNg6dCjbikWODMNDl5mYjg86Si2looXYow%2F3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncf-ray: 9e05322fdec1dd16-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T03:23:12.928238Z","times_seen":406055,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.5/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15904\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65a9b559-3e20\"\r\nlast-modified: Thu, 18 Jan 2024 23:33:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 198206\r\nexpires: Fri, 12 Mar 2027 12:28:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwrXDDRTuSQl5wFwJxDvRkmBB%2B0lQlMYeBrkrFFTQc%2BTSTxw6HHxs0G48vfCF6zW8%2BNIabo6Db75LSRf%2BBLZAjpJNISDV5GOg8ygu9tvDoqpHrA%3D\"}]}\r\ncf-ray: 9e05322ffa8d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43088)","md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-07-25T05:12:16.679375Z","times_seen":6649,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":23,"dns":0,"connect":2,"send":0,"wait":41,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/buttcoin-logo-text.png","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/buttcoin-logo-text.png HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 12517\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-30e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2F43KFsWwAFU1fi3TvwllmquvkHYK2LWPxQpG5Q6EcIQfCEVOVcI%2FsxmVIS8GeswVSIuik6byrWEQ2UImsx4F%2FGnRh9mK28Q3f0hlyw0sK2V4Bv04A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fceb5dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 441 x 94, 8-bit/color RGBA, non-interlaced","md5":"d97d854c45996355c12ec52885da7327","sha1":"a3d36080a8e70fb07eb296b942535fe9da1228bf","sha256":"01b5b296aca3c1bee5542b51dd6f9c6fe489be0e91e9f4d2c81b196dc3d8cd5b","sha512":"c2cd52e4493c6099987f5eb85b4c5bf155399646a23585794a96d4d1dcb4c063a2f4c03a133dc62a594be33b71d3f3721bf13326567760ea3e0393c740119cb4","ssdeep":"192:CkpTtISoji/DOk1vzTRI86MeUdbF3AMG8VlY/WlsAjrtx5U5eJIQLsj79lEd:BpTVoua6vzTRIRMbdbF3vzzYKxWQcA","tlshash":"8b42af84d9d150a2e328b49376d1f02aa7260d43f9545c49bee2df664f22553cf083eb","first_seen":"2026-02-06T22:25:11.023982Z","last_seen":"2026-03-24T01:46:04.917769Z","times_seen":328,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/fomo.jpg","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/fomo.jpg HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7735\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-1e37\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFGrufUdmgPg0JS6dqUaExnCTVOlHsImaTJKAdIofBsyPx1V35mgkXa4W2m%2BhBQ3e4CwMaWfJnDyvqhdR7XUX%2F4Z%2BDYwn8UMpRZgWzuCMR8LqHGi0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fcebcdd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8154916bfe70849a70a005c3db53e6a0","sha1":"0bfdf8886e68f2ba23855816bbb5546ccc88aa5f","sha256":"5f92362d6675ceb4e25d8d462a97b5759dedfea9e1a43be9e348c20b1dc8ecd7","sha512":"b33df49f0111f003e9be4872bb21d3f671b0385b3cb748e700942fa59d250af8f5b8a975b9b4de86df28bd77dd4c3a8ea468117fa379a307f1c785b2364be1b3","ssdeep":"192:sMFQaqfX7Cln5nnnnnnxBF9KHLXkeTkvq0R3P4dJR:svDCln5nnnnnnl96XkMky0JP4jR","tlshash":"00f18df293842317f41e4571b09adb68cf06ac6d516ecb4b9a7070b1772b0829c1925b","first_seen":"2026-02-06T22:25:11.033108Z","last_seen":"2026-04-28T10:02:30.90916Z","times_seen":329,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com//secureproxy?s=%2Fjmpd%2F","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:27.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://treasury-buttcoin.com/\r\ncontent-type: application/json\r\nContent-Length: 2251\r\nOrigin: https://treasury-buttcoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2251,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"cb-l7Gfo/P5Qf23soPFVB9E7/w9XMI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1774182568496\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/22/2026 12:28:28\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 7cdf9888cd7ca99d61040b4e7b34b062\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilkcKy%2FGdIy%2FLxbtRpfsSFyh7p8cNxUeqfR986GGN7bT%2Fmtebg0ox%2BXrJ8iN3gMUTV9AiWiX0kLpbIuIqeIQeNz5Xba3SHS5MMjsruWnrTKytFp7uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e05323e289edd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e766d3ba81fbdb846fd6b16f3c729d05","sha1":"97b19fa3f3f941fdb7b283c5541f44effc3d5cc2","sha256":"c656d653d2470eb4f943c4763caaa82c13c2aa708edd0af81c8fa180e4ec7abd","sha512":"94b169f3f3005261f71d2c01c015c899c90170959ef11d802069d4bfb55dd3de93508fa35e90c8b7db195d704589fd9e4fd8c2e9b20e1b7b5b330c5442e5695b","ssdeep":"","tlshash":"09d02390e17c0c100b3334c10403b78c3faa5b4034c1120077c137f044808c901bd9ae","first_seen":"2026-03-22T12:28:53.387218Z","last_seen":"2026-03-22T12:28:53.387218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1624,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/mx.png","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/mx.png HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 23238\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-5ac6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxKATv0xuI62JlWGjyWhi%2BjPVVE%2FeuZCKOBLlq5NDkpXfBVLKTBiJd8SzuTGA26%2F%2FND9uKUNgLGqk1pSzYawhklBqoeLRSdQYgTIO16EPyHcct53uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fdec2dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1245 x 771, 8-bit/color RGBA, non-interlaced","md5":"724efd6d7fb8e53f35ebb35544c21005","sha1":"a79780a2c3ab600764374aefd72ebd909c0320ab","sha256":"756240f6eb46686fe34ad93c678d5f0f7453cd339262d07eb64a5deffe587e0b","sha512":"f8db6f7c610682c8e64de8bdb8c5bdca1c738964ce14b096f7f373bb75e4a0de5ee863acb9c6c924be6a969314e5373290304426641a08b1d37fb07174aab58a","ssdeep":"384:8nySWNmBkFDlKQkIxfVH0QPlB2FsAmU0dkchRQjATkQ9xnCUN3pRgl1yDluFnvri:tSWNqkFxK6vH08EFshNlJpu3yUnvUGw7","tlshash":"a5a2e1c01858bd73552d1e479e1e98027437d2551ebf908266b9d6e3d1cb4efcaac18c","first_seen":"2026-02-06T22:25:11.036218Z","last_seen":"2026-04-28T10:02:30.914001Z","times_seen":329,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/style.css","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: W/\"69b52c17-1a5bb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 337341\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uF9OIw6kGKBtJXfynTgaVd7UXstMLdIy0ADAMDzCjZOEsKhK0A0SPBmuuvBE8ymW422iDhA8b5W88rjUnrCdQlm%2B9IhyV1UL9BIDbhFeqh9U7jMa9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e05322fbeb4dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107963,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4b426b6d827049ed83eab9a57629c8f2","sha1":"bcf863c5819b560a27f8c784d715116e62c354ec","sha256":"08ebbbdfd477aed5a888f91890854b0b0a2db5131bee9c95de86b91f4e174826","sha512":"389fe7b9f9580605d865859629539aac37c296968145ea552d89d5f39e1866c8327abc80a79337f6ad484889b101124ac8c8000a35a58dc3c13324c8ab16950e","ssdeep":"1536:k0T2a/0Hw+IpljK8+XQG9aLqav3q0PKZBb7dCryUu31us1KQ:b9mRKCbH","tlshash":"86b3655b8ba31159742bd16c5feb470523a89023850ed85e3bdc639cef4d3e8a2a1b4d","first_seen":"2026-02-06T22:25:11.021186Z","last_seen":"2026-03-24T01:46:04.939356Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/moonshot.png","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/moonshot.png HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 163603\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-27f13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaycT3bA1vGA48dscErUAshnDC4mC%2BFyIZ5wqT71gHsnilnqnuqKL7OdboUnSOMYUf%2FZ4yB%2B%2FYawX0X1f3%2FRxY2hoWF5hRL2z35hWGVGW2iWD4igaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fdec3dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"57fd61189d752d573343323364b4a6ff","sha1":"bb034b396d03233fea5a376d40fecc3551fe4e34","sha256":"cfa33eb0a697c1a399d8c037564457117c93e28b744cdf018d813d775c0c97b7","sha512":"d08c46f8e10f6e82cca11bd13f01616d50e95a6bae7a364e8c9f20abe383da5719b8d3304ccd772a2fa2fe5a3027cd87f361e9affa36d8e932cdb38215f383db","ssdeep":"3072:RH/VZgmNBEWL4s1pW4a1JysCKJkDe/FbPptENBjTref2eTyhvnvUA:FN58wW4a13TS0bB2NBj3e23hvvUA","tlshash":"acf312f89f9a5f13aa5cca4e55a72afd38f80d132223520723fdc854934fce52649726","first_seen":"2025-09-30T16:15:35.899295Z","last_seen":"2026-04-28T10:02:30.907105Z","times_seen":345,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/secureproxy?e=ping_proxy","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://treasury-buttcoin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nlast-modified: Sun, 22 Mar 2026 12:28:25 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1x6SsM539nblsEctmHaC4xQz9q5hycoqMOAPyFuSRGh%2BkGBG8xt158CUYe86KXpKf31%2FYsl0fUJAXelGkb981NfTe9lyjPzouclvNk0tTNE4ZF%2BIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0532333f1fdd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-25T09:33:18.740865Z","times_seen":8958,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bitcoin-btc-logo.png","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/bitcoin-btc-logo.png HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jrv9MVxZZKbdJjDthWveVxio740j%2BjxRESDbriS3WhuuvRYayH%2BCVWQGhb9lcKLL70pwU20iA3Cx8izODUge5WjXtfsPhByWvvbU%2FFWw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e0532337a45dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/buttcoin.jpg","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/buttcoin.jpg HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29752\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-7438\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 398736\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxmspmHCY3H4ChkzcVymRrjC0VtpFbpo7O6sB1Fx54Tmpd4XzUA%2BFdiGnrzqeKYr631lFKwF0WUDDTi1kRreMlJgPSqW6%2B%2B%2FJTDuUDV%2BCXsM6K8QLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e0532349f3edd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 500x500, components 3","md5":"c64251749eb46096256b6f81603cd776","sha1":"c72bee02afe40b20ad86a6d3eba69088284b6698","sha256":"963a4ed00b72f5e8244f1f871f72217576b72e3ab11ed5a7e8ba923af9d4c9af","sha512":"16e795979efa218b7f0124e94116ba6794a5147697ef8c8076a560ad0b72e2dfbe98b5e41bc23bc185db01661f23c28d878ad35e513aa886803213a9834d79cb","ssdeep":"768:EQ9wPEi7kx3x77kZwSh32Yjmn1Soi0vgfnAH5A4Xz:59Qkxx7U/9bm1Zi0iAH5bj","tlshash":"7cd2f2c74b19a263efc58637602f8b5a6e374f42d91e153bdd3581f204b2622b9942b0","first_seen":"2026-02-06T22:25:11.030331Z","last_seen":"2026-04-28T10:02:30.874807Z","times_seen":329,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/gsap/3.12.5/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 25515\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65a9b559-63ab\"\r\nlast-modified: Thu, 18 Jan 2024 23:33:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 39232\r\nexpires: Fri, 12 Mar 2027 12:28:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvYfi3Ot8t3Z65YAZ0MH04HJiuwrNenR8albA30MwEggqGmCTX3ZvSLI4KQiTKWiayeJjtBWnRik1UkOwfvxbC2pVEftUokZonsM9DH5ark7r%2Bw%3D\"}]}\r\ncf-ray: 9e05322ffa660883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72214,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-07-25T16:19:19.424346Z","times_seen":8318,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":16,"receive":22,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/pump.png","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/pump.png HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 47713\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-ba61\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 398735\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oxL8BhhKDwVH%2F%2FwJs5GSHdXjE06FsTIPIU50%2BokYAtq5FDFkj%2FKPpZoWHthSUFYNGobSznH3wg%2FBl1oq7t52l%2B%2BSfO4dE%2FPAS5uqYfB2pLfHR7Hbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fceb7dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1271 x 1314, 8-bit/color RGBA, non-interlaced","md5":"c4e83ff71a9d991aa1fa80927bba3040","sha1":"250be6e21cd0c68c77514f9cd4597708768659e3","sha256":"75f4c040dbe64a29f9901b9de7ad4d2cebb07f05c2130f67cb7b6db86a8fd8fa","sha512":"0ce8309e2fe0ff4ee579b74da7e7438652ef82fd75890870edf30c7465ba1c6602aea23f62b5eedc8e08f39bd5c700f08d3d222d66a2997e1c7c480b873f6bc8","ssdeep":"768:ov0RdSEAHgLKJhHxF/HBCwqEsL/MJMXxCN5c7u2UFYFtus3N5JLUtwL/g2dDaCM:ov0RdSEDe5H4fhCN2PUGFldXT/xdDu","tlshash":"d923f11708871aa0c9dc53be7831a37de77ca7a48122c999024eed6730b5dfba7c50e5","first_seen":"2026-02-06T22:25:11.048573Z","last_seen":"2026-04-28T10:02:30.889393Z","times_seen":337,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/isomorphic-fetch.dark.min.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /isomorphic-fetch.dark.min.js HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: W/\"69b52c17-788b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d19oQLkFsX3Tg9shlENmwv7flpkgqBz44dI1DiPFwJCv2pxurXu%2B6p9Ebka9uYbw17F2Ps887jAKIKvlGEd9KqVke9Y%2F20kqfhHeLsFWR%2BgE%2BiAirA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e05322fbeb3dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493747,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65136)","md5":"e8c474ecb85bba2a2d2585b0f62e9c62","sha1":"9d21cee8f25300fa20e648995b4a3af55b5206c0","sha256":"e6cb2680ffbef771df7d52fe0460c974442b72696a101b3e7ae79b5d965850fe","sha512":"10e906f0e89a7c855fd5357eafd50516cf60af5c7692785e21ebdddf5a89a37d4ea86bba0172789fb85b055e7449e1af59bfe547ac86204afc8a802468ac135c","ssdeep":"6144:YTJTNK83usKoY04YAtHLXDB3JGT8udonKByxXmS6HSSt/NnIOxcI7YM1SfRGtLe7:ya0avlKBW6Hi4gMG","tlshash":"86b430466db3847d9ff0a13586b121989bd3f4cacbd7a916b5d2af4bd012800fcd6362","first_seen":"2026-03-13T16:27:24.111989Z","last_seen":"2026-03-24T01:46:04.941299Z","times_seen":5,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bitcoin-btc-logo.png","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/bitcoin-btc-logo.png HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kTGK9jmtmbXDYUOay5bsf1aZQG7z91HjMCrpAlWVs5Gy%2FDbC1VWD%2F8zALwaIYaRQd59%2FlcpewoAGRYshF0sTIj3HAK38dJ8zdNemsva\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0532305ccbaa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/script.js","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99lqHZTyj8WOTVURy3mHRYZKj1hgNPYx7QoQO9SG%2BPMSnZ7G%2BG7dF6IDAjGnxGGARsLpP%2FfIlif4SyvsYUqLEZDl2p9xCktrdqdt5s44YuIY7HaCkg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9e0532346f3add16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fconvnetjs.cjs.js%3Ft%3D29569708%26u%3DIv3vtYOUoptGAkSpGDY5MjU2NDQ2MjhjZmYzYzM0MDI3YzFlNcoLfPsM8k--lInn-g","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fconvnetjs.cjs.js%3Ft%3D29569708%26u%3DIv3vtYOUoptGAkSpGDY5MjU2NDQ2MjhjZmYzYzM0MDI3YzFlNcoLfPsM8k--lInn-g HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=convnetjs.cjs.js\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/22/2026 12:28:26\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 73f8be4140d35d8189f5424c9e8f1733\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJxzI9U07cctL%2Beg4QDrXg0h6NgMsgZgQv2BuLOq4ezMdgxxlWs8VoF%2FVQb85CW4dFpLiaYx1lXpUmsi63fFkzgp0c89Y%2FdDFF4RzbCi%2FQRkhrXRAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0532350f54dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"resource_available":true,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/buttcoin.jpg","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/buttcoin.jpg HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29752\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-7438\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 398735\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNmiZJfeY%2Fhw2Unh8Ipcnovn5wZZk4SnVqeziHZmpCNeX68zsKOqbS5FzJAwt9JWTNLnf5Tc%2FkijUPK31aTIqVACvnWT%2B5yj6Hq9FN%2BwyKAWuRncxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fceb8dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 500x500, components 3","md5":"c64251749eb46096256b6f81603cd776","sha1":"c72bee02afe40b20ad86a6d3eba69088284b6698","sha256":"963a4ed00b72f5e8244f1f871f72217576b72e3ab11ed5a7e8ba923af9d4c9af","sha512":"16e795979efa218b7f0124e94116ba6794a5147697ef8c8076a560ad0b72e2dfbe98b5e41bc23bc185db01661f23c28d878ad35e513aa886803213a9834d79cb","ssdeep":"768:EQ9wPEi7kx3x77kZwSh32Yjmn1Soi0vgfnAH5A4Xz:59Qkxx7U/9bm1Zi0iAH5bj","tlshash":"7cd2f2c74b19a263efc58637602f8b5a6e374f42d91e153bdd3581f204b2622b9942b0","first_seen":"2026-02-06T22:25:11.030331Z","last_seen":"2026-04-28T10:02:30.874807Z","times_seen":329,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/dogecoin-doge-logo.png","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/dogecoin-doge-logo.png HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGg7oyotdXdhiAVCnry4UbgwycBDDB4hKiEwbLcdiRsjvNqJHirub9lBtd6ZyTcJyFcGEiLUVxt7omIIq2sbC0z2n%2FPdfMeWwz7AyFIl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0532305cc9aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":73,"dns":12,"connect":8,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treasury-buttcoin.com/img/original.jpeg","fqdn":"treasury-buttcoin.com","domain":"treasury-buttcoin.com","tld":"com"},"ip":{"addr":"104.21.20.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:24.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"treasury-buttcoin.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:40:09 GMT","end":"Fri, 12 Jun 2026 08:40:08 GMT"},"fingerprint":{"sha1":"5D:B2:07:63:AD:24:A7:AD:CA:1A:E4:FF:7F:25:0D:8C:BE:6C:5F:10","sha256":"1B:C3:A6:2C:59:0F:E2:D7:47:B2:E8:E8:DE:F1:E0:CA:89:A7:99:D7:96:0F:63:19:66:89:B4:5E:3B:20:D7:7F"}}},"request":{"raw":"GET /img/original.jpeg HTTP/1.1\r\nHost: treasury-buttcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28436\r\ncast-mode: default\r\nlast-modified: Sat, 14 Mar 2026 09:36:23 GMT\r\netag: \"69b52c17-6f14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTc6zhVZCFuVpZf7XQSn5%2FBydUDgaHAd%2FDPFmH1dv3Qr49VXFObXpmwYxhno2X2SUKF%2FrCzFpbDRu2JH7Onhhn0uCNcpnedmw3Ky89TAyLG9MGaXqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e05322fceb6dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1086x280, components 3","md5":"a9077b87a9f57842ff352032226fb840","sha1":"bfdf0ff4970384bef17b102c974fc735cb4505fa","sha256":"2454a580517e4a76f2232a510af27b05040986d4dd572b95ad3affe686eea877","sha512":"781ca67bebd40498185433a4244772fbbbd5d06dc015a0323013bd82fbfaf35dd0c7a352f8559a22979466ec9ecf9b80ea91d6cd354ab8a0b83c5e24776cc9f5","ssdeep":"768:c397s+3M9wqiWjrb0YxVNAl+w5EiCBNtnz23:cNw+QwqNb3+paPny","tlshash":"bcd2d0acda956073d9480eb240db1e7766b33d061f1e550a39ac27b29711448a9d13f3","first_seen":"2026-02-06T22:25:11.041237Z","last_seen":"2026-04-28T10:02:30.884804Z","times_seen":329,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"treasury-buttcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/dogecoin-doge-logo.png","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://treasury-buttcoin.com/","date":"2026-03-22T12:28:25.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/dogecoin-doge-logo.png HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://treasury-buttcoin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 22 Mar 2026 12:28:25 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EU1xWoXze36zcxRTF%2BimtZJbvUL6BhIw63Rd32sN91PGwVdfLgktvGck4ohGlYKKejuCuMU9cRiLoCV8z57vCcbLVe6LY2Iyhwexhrkd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e0532337a46dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T03:24:04.102516Z","times_seen":17538758,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}