{"report_id":"97be5f34-774e-4086-b3f4-fa45c837a7ac","version":6,"status":"done","tags":[],"date":"2025-09-17T11:15:39Z","url":{"schema":"http","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"title":"Bucky"},"submit":{"url":{"schema":"http","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-22T11:15:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinmarketcop-api.com","ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":5196,"sent_data":4357,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bonkbucky.com","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":1063317,"sent_data":1312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":18507,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":30806,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":313,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":9481,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-08-05T18:17:41.390527Z","times_seen":3615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ffadc0cdcbacf63c7b93ee1d3c110d4","sha1":"afa2b47ffa312688e9d3589f9b8e7fbc133f8fd4","sha256":"020ec8bdc8979b5fa532bf5563c58a7d27b6d9b9e0c3ed29cd81551110d96b38","sha512":"ffd1f3ba79c19246a39d7d0fb1999598ff348e56966956065470f2ae8d272959f3cb7b261470b7e215a1be5184b76f67aaab24803eb6668a2ef2d3973a891644","ssdeep":"3072:ERiA64xMhiA64xMKwqfvjenhSWAcvPCMNj4MU49:ExcbHjenhSWAcSsjD","tlshash":"b0f3a67d0a9e10768311b2679cf24197b992481dc3bcbaba7750b28ef6cc44c66f71b4","size":171348,"data":"","first_seen":"2025-09-17T11:16:02.707025Z","last_seen":"2025-09-17T11:16:02.707025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonkbucky.com/crdIoQCWye9.js","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f667373583106aaef8a503bd83d21f41","sha1":"c45f6de0bed3380d7911787c0d2b3c908369bc79","sha256":"e2935bb7f279614e54602d6763356c22475cda6893dbb19cc110c330a092846f","sha512":"0b2ba3aa042798fcd5a309fb96eea36e46269cf7d5039429e19e25831c8cb969cb7832dc6886cee416601297d9ad0813ac7191f4beeaa5dd73aeb85938f2b837","ssdeep":"3072:3r4VKVo4VKVTU471RenhSWAcvzgIhRUMueC:3JVoV/xRenhSWAcU8R0","tlshash":"4404977e0689107a8211b2678cf2109bb996441dcbfcba7b7741b1cff6cc85c65f62a4","size":177538,"data":"","first_seen":"2025-09-17T11:16:02.693175Z","last_seen":"2025-09-17T11:16:02.693175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/cdn/bundles/front-worker.js?t=29301795","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e84c1b0adc3f2c725c97b98f69c064bb","sha1":"0980089d565c8eb20b87f5f2a9f6070644d100c5","sha256":"d45e467adb96a7a40cac3c7ef9814382389333ff3a57ae7115c9419e01eccfc5","sha512":"626b843ee3ccc5c00c9db8ad2798d676537fb04d82eaa90df02e075fde69b131063f06e248ee88f08cca8885e99cc7c895118aa9a17752434f3486a01b822bfc","ssdeep":"6144:Us6RCjrjOJMZUk6p1ZsJzO3fXeYglEU5nyiC5z:R64fj0lWCvXeYg8i+z","tlshash":"ec748c917280617916634fea41bf094ab238f1206409492cf75cc8d72bb99dad9bff7c","size":339520,"data":"","first_seen":"2025-09-16T11:40:23.234337Z","last_seen":"2025-09-19T02:37:55.829416Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=bonkbucky.com","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=bonkbucky.com HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://bonkbucky.com/\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:20 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zv%2FV%2Fgp%2F52Mp1vkZD2ZBMH%2F7k8jbdB%2FGiTn2AHKiXAiHVhghZDUMQiAdm0lHVTC4s6vzmMLJ5CFqoUHJ%2FO2sxpXW0QHYGFld%2BntH2vsJL3JVwIc%3D\"}]}\r\ncf-ray: 98082f5fbdb456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=bonkbucky.com","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:20.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=bonkbucky.com HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoianNpMjFkbGFzIiwiZ3JvdXBfaWQiOjEyMSwiaWF0IjoxNzU1OTUzNzM0fQ.Bb5ktMwZYqfh6A8Tc8_nTpTs5xBKV7aOQMYtrZtp2YA\r\nX-Direction-Safe: 1758107719657\r\nX-Scale-Referrer: bonkbucky.com\r\nX-Auth-Key: wz8fqGpSAI3OQC8l8lZ43h4gB7Scf9SoxirHQZFsJTQ%3D\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iPStDzP7ebeIML4vGe1SkSTHdCf3VFdVmY9nh%2B%2FpFycIbUg8KDHyztbBoyqyCy4gdvgn8dYEZWDgPGpCkF7LdAbNMpemgwhLyDV2XlT70V425M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"19d-3gvoQsiyNgvd3MQs5H52j6Q/S1o\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98082f656dea56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe82c4498fecc61ba52c53073a925f3c","sha1":"de0be842c8b2360bdddcc42ce47e768fa43f4b5a","sha256":"cc4f48b6327cd3988669411c8c5bf7ff11c858d87dae47f20336328fabc98185","sha512":"2028221734554583752f972f575b89b7c0152a0f597abe9c1a96bd727b6456fae6457d5e6b4a389e2eb610422c79f542714fb157249f1b3ed3164a7d2b7c2a9e","ssdeep":"","tlshash":"56e0a39d159cc64bff693458564b4d2806567c8a23fd49b60838c44196508445d1f7b6","first_seen":"2025-09-17T11:16:02.687099Z","last_seen":"2025-09-17T11:16:02.687099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:18.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonkbucky.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 15:13:35 GMT","end":"Fri, 21 Nov 2025 16:09:58 GMT"},"fingerprint":{"sha1":"D4:9A:EC:58:33:89:4D:54:2C:8E:63:05:9F:FD:DF:BA:5E:B4:83:5B","sha256":"4E:76:49:6E:5D:D6:01:BE:84:38:85:49:A2:31:D9:36:76:01:D1:0D:29:CA:22:93:45:1C:B4:04:E8:55:3F:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonkbucky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 17 Sep 2025 11:15:18 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 25 Aug 2025 13:20:50 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkvtQuxSVAebEpYeQDCLxDU8aRfIBqunkxLOxYCv4FtpIHV%2F84NAxKCWYUn9ReGvLnOlQAXQPWtSk2u0ulLv4ctSjw0%2BM%2Fxe8ynI6ug%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98082f593c8bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441900,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65508)","md5":"66b75ca3b9336a6c5ea70aa791d5ad1f","sha1":"157e3e8003acbf49908c58e395df0fa153f5c434","sha256":"566344a5290c14c97558a76817566ea35b078b61f73fd420de321a1e22140725","sha512":"4255cc7952f23f81b3a6dd6d947c1ecc5d19070a74d4cc2345644e35dd0dbbd1dec321e944bd08fe0c7c5cd99221cf72445d06f62d3e07905a265243460f077f","ssdeep":"6144:t9IUeo+wJzOhEZ5xrbKpgB1TZ4Toy8CIUeoTwJzOhEZ5xrbKpgB1TZ4ToyaFzB:tccPbK81TZ4Toy8ecPbK81TZ4ToyaRB","tlshash":"e8945a301e0a62139c725a5370c86af0edd6706b2168035ae56f5cc5ccfaa76537eb3b","first_seen":"2025-09-17T11:16:02.690015Z","last_seen":"2025-09-17T11:16:02.690015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":367,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonkbucky.com/crdIoQCWye9.js","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:18.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonkbucky.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 15:13:35 GMT","end":"Fri, 21 Nov 2025 16:09:58 GMT"},"fingerprint":{"sha1":"D4:9A:EC:58:33:89:4D:54:2C:8E:63:05:9F:FD:DF:BA:5E:B4:83:5B","sha256":"4E:76:49:6E:5D:D6:01:BE:84:38:85:49:A2:31:D9:36:76:01:D1:0D:29:CA:22:93:45:1C:B4:04:E8:55:3F:CE"}}},"request":{"raw":"GET /crdIoQCWye9.js HTTP/1.1\r\nHost: bonkbucky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 17 Sep 2025 11:15:18 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 25 Aug 2025 13:20:50 GMT\r\netag: \"2b582-63d306ca54ce1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 37363\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjcpSKyVWrvQyKM7%2B3GcGCvI%2FJfQtae1ZTcR4z16UZmB2Y2ihNbxtB4gcatb3UXnKvOe9BfIX6cDaw1uFldcuOX%2FjCU35dLCug%2B0PeE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 98082f593c8cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177538,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63985)","md5":"f667373583106aaef8a503bd83d21f41","sha1":"c45f6de0bed3380d7911787c0d2b3c908369bc79","sha256":"e2935bb7f279614e54602d6763356c22475cda6893dbb19cc110c330a092846f","sha512":"0b2ba3aa042798fcd5a309fb96eea36e46269cf7d5039429e19e25831c8cb969cb7832dc6886cee416601297d9ad0813ac7191f4beeaa5dd73aeb85938f2b837","ssdeep":"3072:3r4VKVo4VKVTU471RenhSWAcvzgIhRUMueC:3JVoV/xRenhSWAcU8R0","tlshash":"4404977e0689107a8211b2678cf2109bb996441dcbfcba7b7741b1cff6cc85c65f62a4","first_seen":"2025-09-17T11:16:02.693175Z","last_seen":"2025-09-17T11:16:02.693175Z","times_seen":1,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/DRRZC8GxrhSR3lqkB7Y4a3Xg.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 16 Nov 2024 00:00:00 GMT","end":"Sun, 14 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"DB:42:7A:CB:D3:47:48:68:DB:E2:F7:72:A3:55:25:DF:96:C8:A6:49","sha256":"D9:DE:82:C1:10:3B:BB:ED:26:16:D0:D5:4E:86:7C:A8:C9:52:BE:61:7C:AB:7C:DB:B8:B1:BA:54:31:C4:06:1F"}}},"request":{"raw":"GET /images/DRRZC8GxrhSR3lqkB7Y4a3Xg.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/avif\r\nage: 3228919\r\ntiming-allow-origin: *\r\ndate: Mon, 11 Aug 2025 02:20:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-6899534f-29dc62e6303804f9608a9302;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 7a3f4592-9077-4d84-aaad-26199128aae2\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"de479c83af556d3c090f802b496a3c6d\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P2\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"ZowIpqeEtmObll76CP4FSL5ezuueo3NI1OSNGS0X8kDAsy4G7WCr0w==\",cdn-downstream-fbl;dur=6\r\nx-amz-cf-id: ZowIpqeEtmObll76CP4FSL5ezuueo3NI1OSNGS0X8kDAsy4G7WCr0w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20962,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"de479c83af556d3c090f802b496a3c6d","sha1":"448bd36d06333636ac262ae959c4f0ba57daf3ab","sha256":"7181e7f762d0433e1aa645b78cf387f41f5e2955e6d1f8c54e95c97c844926d7","sha512":"5b0cea51764ca69900588c3c95e51fc5c051f038b6d22855b364eb5a524d1601976fb6fd9ef4114457aef37c62ed8ceb3666314c63099f359fd876423af5f115","ssdeep":"384:rKPDBqXD3jDXn5rdJ04BMjHFqRKtjB83zqmsEe1+uJK5mzoLOuTMB1OP:SDBIX3BdNMZqO632LWEyPLPl","tlshash":"3092d07c256b6511cda1133b1804a1ec7beba33ab2da56a5222f3953c9c169f3e44c3d","first_seen":"2025-09-17T11:12:50.335722Z","last_seen":"2025-09-17T11:16:02.696946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://bonkbucky.com/\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:19 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mvdXwnCYfo6TGb8Tn%2BBEpSYcTLHgQv2Y1o5ArUeuRI748Y6TAzLNk91cuFWPRNXVWhGrMOCKQD5V018SEbtaioq5zuZPUEcxIvhfr98RmDTMTA%3D\"}]}\r\ncf-ray: 98082f5f2db356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":5,"dns":1,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonkbucky.com/","fqdn":"bonkbucky.com","domain":"bonkbucky.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-17T11:15:17.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonkbucky.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 15:13:35 GMT","end":"Fri, 21 Nov 2025 16:09:58 GMT"},"fingerprint":{"sha1":"D4:9A:EC:58:33:89:4D:54:2C:8E:63:05:9F:FD:DF:BA:5E:B4:83:5B","sha256":"4E:76:49:6E:5D:D6:01:BE:84:38:85:49:A2:31:D9:36:76:01:D1:0D:29:CA:22:93:45:1C:B4:04:E8:55:3F:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonkbucky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 11:15:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 25 Aug 2025 13:20:50 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGZyEU0yAkl0lsMyJ1IBQtMg3XVlu%2FP%2BI1J4D%2BQBAeMkpNlQCVXRDjzWXY8F2wCXk8IlNYFw%2F5vpujkT%2BcHCCN2JdY1X0LcVItge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98082f51eefa7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441900,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65508)","md5":"66b75ca3b9336a6c5ea70aa791d5ad1f","sha1":"157e3e8003acbf49908c58e395df0fa153f5c434","sha256":"566344a5290c14c97558a76817566ea35b078b61f73fd420de321a1e22140725","sha512":"4255cc7952f23f81b3a6dd6d947c1ecc5d19070a74d4cc2345644e35dd0dbbd1dec321e944bd08fe0c7c5cd99221cf72445d06f62d3e07905a265243460f077f","ssdeep":"6144:t9IUeo+wJzOhEZ5xrbKpgB1TZ4Toy8CIUeoTwJzOhEZ5xrbKpgB1TZ4ToyaFzB:tccPbK81TZ4Toy8ecPbK81TZ4ToyaRB","tlshash":"e8945a301e0a62139c725a5370c86af0edd6706b2168035ae56f5cc5ccfaa76537eb3b","first_seen":"2025-09-17T11:16:02.690015Z","last_seen":"2025-09-17T11:16:02.690015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":316,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/5H7Kr1sRhc2j6xe5Vk9yvP91rc.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"3.164.240.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:18.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 16 Nov 2024 00:00:00 GMT","end":"Sun, 14 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"DB:42:7A:CB:D3:47:48:68:DB:E2:F7:72:A3:55:25:DF:96:C8:A6:49","sha256":"D9:DE:82:C1:10:3B:BB:ED:26:16:D0:D5:4E:86:7C:A8:C9:52:BE:61:7C:AB:7C:DB:B8:B1:BA:54:31:C4:06:1F"}}},"request":{"raw":"GET /images/5H7Kr1sRhc2j6xe5Vk9yvP91rc.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ndate: Sun, 07 Sep 2025 20:29:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-68bdeb34-5b431b0663818d512578982e;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 005e0d65-61b5-455a-9f4b-cd9678d84fc2\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"0d4aa861c52d3b8ed163f378ec86f6bb\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 4s-EE7W66iuIv3qyoELjzvQmm6U7_XoKwyzcn9fXgyPRJ4Qs7IjVfA==\r\nage: 830738\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P2\",cdn-rid;desc=\"4s-EE7W66iuIv3qyoELjzvQmm6U7_XoKwyzcn9fXgyPRJ4Qs7IjVfA==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0d4aa861c52d3b8ed163f378ec86f6bb","sha1":"30d777d767b5200260af9c1f0ac31a96939c71d4","sha256":"136bde8eaf24a1965ec11a3a7d462db52bc5b68cd38bf80c2b3bf94aa659fb34","sha512":"096dfcdf8904501367b5b417db615d67ac2adcf3dc4bc5ba05c280f03300ed16bf6454497c06950260cb3f7f2315cb4677999c897e6ebcb2cac6a1f2412685bc","ssdeep":"192:rGJ7CbhQY6LJCbtTvy7C8Ssp9moCeWPMSNz9kZWk7:rPQYuJGtTKC9s7moIkMk7","tlshash":"32e1afeb13587410e2be10758903cb6ec790499af69ae27cb35669e0a46c0390117f2e","first_seen":"2025-09-17T11:16:02.699304Z","last_seen":"2025-09-17T11:16:02.699304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":86,"dns":44,"connect":8,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Sep 2025 11:15:19 GMT\r\ndate: Wed, 17 Sep 2025 11:15:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-08-05T11:31:45.124637Z","times_seen":916,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":71,"dns":2,"connect":7,"send":0,"wait":19,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=bonkbucky.com","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=bonkbucky.com HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://bonkbucky.com/\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:20 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKpPllqNsoKFDheqJRSRgt%2Ffwh%2FQqcAImHQshjbkeVPLfZ7pIsdWVLtDhK3z5Kjb49G2WdGZoty%2FJvHc6lf7aCxXZMsu74ehC8ei6%2FIw427r6oI%3D\"}]}\r\ncf-ray: 98082f5fedb656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:19.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: bonkbucky.com\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoianNpMjFkbGFzIiwiZ3JvdXBfaWQiOjEyMSwiaWF0IjoxNzU1OTUzNzM0fQ.Bb5ktMwZYqfh6A8Tc8_nTpTs5xBKV7aOQMYtrZtp2YA\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baQPwwOVkK5PcC4uGsHeUq17s1RID3uET1LA8qT5KlnG8kjc8WyStLNWaBQb5PvFm85ya3HXLDPg5oxEW%2FONrURNkcTduny6REAHk6H7EP2nsHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98082f5fcdb556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=bonkbucky.com","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bonkbucky.com/","date":"2025-09-17T11:15:20.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=bonkbucky.com HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoianNpMjFkbGFzIiwiZ3JvdXBfaWQiOjEyMSwiaWF0IjoxNzU1OTUzNzM0fQ.Bb5ktMwZYqfh6A8Tc8_nTpTs5xBKV7aOQMYtrZtp2YA\r\nX-Direction-Safe: 1758107719622\r\nX-Scale-Referrer: bonkbucky.com\r\nX-Auth-Key: mdGFIOQALJ8aDQ1ynOCg%2BQVLFH0PJC1U8U6PYHAIMWU%3D\r\nX-Auth-Key-V2: 0GvhzoTE%2F%2Bm%2BNToOkupv2GaDQpJ4vcyiw2GM1UQEASk%3D\r\nContent-Length: 2031\r\nOrigin: https://bonkbucky.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bonkbucky.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 17 Sep 2025 11:15:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0j4YC%2FZQGZiRwOOlcES3QopzSKXA5SQZ6qEiACvVmbzDa1Lz0IPnDLGRN33Oe3VbbcdgC1RWLBl9jSR4vm7KUV4UmaBBSPWpfhaZAjtmDraen4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://bonkbucky.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"254-1ZC3bcvX0zRgrYNTJkzNLgCST4g\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98082f637dbe56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"28e037f9bebc68d715a67dc6155aa39f","sha1":"d590b76dcbd7d33460ad8353264ccd2e00924f88","sha256":"7699e69b02c655a307d5b1ec5284d57c3ed8675c72298088f3afd8dc8b07448a","sha512":"60511f8afc8924e7e3c34b7274d6a3fbeb7c601b3fdec0a811dcc41cd4be336e4ccd445b7b598743b631f5394c0e3b351c3551e8eae6c8e98e403725036beecf","ssdeep":"","tlshash":"aaf0b7cc2b4c138aa8810be5de790e02471c0ef19a80580131c17fecc893e9dd18c129","first_seen":"2025-09-17T11:16:02.703968Z","last_seen":"2025-09-17T11:16:02.703968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}