WEBSITE ANALYSIS REPORT

http://mysteriousprocess.com/c.G-FBzCcDzE9_jGbHGIlJj-aL2MlNkOP_TQERwSMTz-EV3WNXjYc_0aNbzcUdx-OfTgghziN_zkQlwmOnD-lpfqNrjsY_1uOvDwAx2-MzkApBQCJ_mERFpGdHD-0JxKNLzMY_3ONPTQUR2-MTTUcV1WM_DYYZ2aNbz-kdweMfDgE_4iJjmkRl0-an2o4p9qZ_2sdtEuSvm-lxVySzmAN_0CMDUEpFr-bHjIkJ4KS_XMANyOWPk-9RJSWTEUN_sWeXUYRZi-dbDcJdleY_UgEhmicjH-RlumPnUoN_nqSrksttV-QvkwlxKyW_WA5BKCdDl-lFXGUHmIl_ZKVLzMVNr-SP2QlRCSa_0U4VyWVXm-tZZaabkcU_1eWflgdhG-ajFkll6mT_XolpZqVr0-0tyuTvWwp_ayazUA5BE-ZDGEpFZGa_mIxJqKTLU-RNVOMPUQ1_XSVTmUpVa-RXEYRZQaa_Uc9d2eSf0-Jhqiajik5_jmRnUoNpP-cr0sptZuR_CwZxyyczm-VBxCaDDE1_hGOHDIMJ0-ZLmMUNzOZ_jQQR3SMTz-VViWNXjYc_3aObGcQd1-MfTgAh3iN_WkElymYnW-Yp3qYrjsI_wuMviwZxy-czmAlBkCP_TEcF2GYH2-ZJlKZLWMY_xOMPzQMRz-ZTjUVVhWZ_WYNZlaObG-JdieNfmgI_yiMjzkAl2-OnDokp0qO_GsQt2uJvn-JxzyczmAM_9CcD2EhFv-cHnIRJsKa_WM5NrOJPn-NRpSZTDU0_4WNXzYcZz-MbTckdzeJ_ngRh0iPjT-Ilmmenmo9_uqZrWsltk-PvTwYx2yN_TAgBwCNDj-IF

04 Jan 2026 · 20:27:14.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:26:50.800 GET 302 document 618 B 331 ms 1 alerts

20:26:51.075 GET 200 document 618 B 180 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://butteryboy.pro/ddH.Jehfbgn_NipjdkDl9-hnZoHpVqy_bsDt1uovd-HxRywzcAy_UCzDQESFU-yHRIiJUKy_RMnNJOjPZ-GR4StTdU2_VWiXLYmZN-vbbcSdUey_RgnhQiljM-klZmynLom_hq0rbsWtw-lvMw0xZy0_JATBNCEDa-HFRG0HcIH_MKlLMMjNU-zPQQSRUSy_NUTVJWGXJ-TZIa1bMck_ZemfagHhZ-mjZkCl5mj_bo2p0qlrM-jtUuyvRwm_FywzaASBU-yDNETFJGG_cI3JVKiLb-WNlO0PXQ2_ZSvTcUmV1-fXcYmZVax_dcWdVezfd-ChUiyjNkT_NmGncoCpU-yrNsTtNuE_ZwmxIy2zY-2BYCwDMED_gGtHOITJM-0LNMiN0O0_MQjRkS4TL-TVkW2XZYW_EatbMczdk-4fMg2hMi0_YkWlUmznY-WpRqmrJsT_Iu1vMwjxZ-0zcAyBUCy_NETFNGEHM-TJcK2LNMz_UO1POQDRQ-xTMUCVUWy_NYTZIa2be-idUeyfNgT_NiEjMkTlA-xnOoDpgqy_MsTtEu

IP / ASN

88.85.94.254

AS35415 · Webzilla B.V.

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text
MIME type: text/html; charset=UTF-8
First seen (UTC): 04 Jan 2026 · 20:27:15.888 UTC
Last seen (UTC): 04 Jan 2026 · 20:27:15.888 UTC
Times seen: 1

Size: 618 B (618 bytes)
MD5: 624d5f05aecf5249feaec3be65a31a60
SHA1: 3a000f0baf4b9601df00108f585556afa7bb435f
SHA256: b729eda4058868597ef7c9347babda12f4c0e7e2cd6adc07cc56cdb55e074c59

Certificate information

Issuer: Let's Encrypt · E8
Subject: butteryboy.pro
Protocol / cipher: TLSv1.2 · TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
SHA1 fingerprint: AF:13:9B:D6:53:5C:08:C1:D6:55:8E:A9:27:4A:17:F2:B5:7A:8E:B5
Valid from: Sun, 28 Dec 2025 00:23:13 GMT
Valid until: Sat, 28 Mar 2026 00:23:12 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ddH.Jehfbgn_NipjdkDl9-hnZoHpVqy_bsDt1uovd-HxRywzcAy_UCzDQESFU-yHRIiJUKy_RMnNJOjPZ-GR4StTdU2_VWiXLYmZN-vbbcSdUey_RgnhQiljM-klZmynLom_hq0rbsWtw-lvMw0xZy0_JATBNCEDa-HFRG0HcIH_MKlLMMjNU-zPQQSRUSy_NUTVJWGXJ-TZIa1bMck_ZemfagHhZ-mjZkCl5mj_bo2p0qlrM-jtUuyvRwm_FywzaASBU-yDNETFJGG_cI3JVKiLb-WNlO0PXQ2_ZSvTcUmV1-fXcYmZVax_dcWdVezfd-ChUiyjNkT_NmGncoCpU-yrNsTtNuE_ZwmxIy2zY-2BYCwDMED_gGtHOITJM-0LNMiN0O0_MQjRkS4TL-TVkW2XZYW_EatbMczdk-4fMg2hMi0_YkWlUmznY-WpRqmrJsT_Iu1vMwjxZ-0zcAyBUCy_NETFNGEHM-TJcK2LNMz_UO1POQDRQ-xTMUCVUWy_NYTZIa2be-idUeyfNgT_NiEjMkTlA-xnOoDpgqy_MsTtEu HTTP/1.1
Host: butteryboy.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Sun, 04 Jan 2026 20:26:51 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

20:26:51.440 GET 200 document 3.3 KB 199 ms 1 alerts

20:26:51.732 GET 200 document 38.4 KB 228 ms —

20:26:52.055 GET 200 lazy-img 43 B 29 ms —

20:26:52.103 GET 404 img 146 B 26 ms —

20:26:52.482 POST 200 beacon 0 B 28 ms —

20:26:52.502 POST 301 document 513 B 28 ms —

20:26:52.533 GET 200 document 513 B 133 ms —

20:26:52.861 GET 404 img 513 B 15 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests