{"report_id":"fa866fa9-c66b-4aca-8289-7bca4cab5783","version":6,"status":"done","tags":[],"date":"2026-03-22T15:21:44Z","url":{"schema":"https","addr":"bitfufugold.com","fqdn":"bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"104.21.80.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.bitfufugold.com/login","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"title":"BitFuFu","dom":{"size":28002,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28002), with no line terminators","md5":"d0abe59286dbd00811cbe09aa3b948fe","sha1":"f7e40c419bc40dd126d1319607982f03f2b56b93","sha256":"401a8c67905dba44311dcd164dccde510b90fa3538520a89c1579e59ae17b8d3","sha512":"0f8fec36f538d91eebb42dee5c298c37a661d51d1389bd76c30189d12ac6504d0fa619e5a694ebe09c3ac4f816441ede7448f4ef374bfd0ee48ebd41524caab4","ssdeep":"768:lkjhhrqUTp/nnC/nC6cxxjTTTkRTs0qAVeiCpiHoPTflCpiHoPTfTgSApSU7hjR2:lkjhhrqUxuvYiHbiHvixT","tlshash":"c3c26df206712c3bc357669458b08f0a3263c28f9b23a92793b5365ad3dee7408b71c5","dom_hash":"domhash1a8179498cb6bf869ad8855fb13dd1c6","first_seen":"2026-03-22T15:21:51.524517Z","last_seen":"2026-03-22T15:21:51.524517Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitfufugold.com","fqdn":"bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"104.21.80.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T15:21:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitfufugold.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-22T15:21:46.98122Z","last_seen":"2026-03-22T15:21:46.98122Z","alert_count":1,"request_count":1,"received_data":3324,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.bitfufugold.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-22T15:21:46.98332Z","last_seen":"2026-03-22T15:21:46.98332Z","alert_count":5,"request_count":5,"received_data":2448558,"sent_data":2272,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.bitfufugold.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-22T15:21:46.984416Z","last_seen":"2026-03-22T15:21:46.984416Z","alert_count":8,"request_count":8,"received_data":11616,"sent_data":5085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bitfufugold.com/static/js/main.6d8aaf25.js","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"445a29c3b25c234243682dbd9baca008","sha1":"10f0c68ee186c2d39362673d5cc83fffea95ce11","sha256":"19fb660fb81dcafadb6598dce3afb873e34814e6bbfd70ead13f8be6ff852e9d","sha512":"074f66dd289e59427d07287f6ac906214450252ba3ca5a05d7d618c0cf82f35d1e8845eb02ecd4886c9fbed2a9d50605df450e580ac894946265ed3ac6cfdf1e","ssdeep":"24576:mZXmjf6yEq4TyelX+ZIfgJPBQJCZSc6RQKfkEqlkqo7M0fq3rHte:LZIfgJJQQXlZrHte","tlshash":"e7b54ac233d1b4d596d610a9907f440eb2d62c1e209f805cfea9c8eea46558e727ff78","size":2417602,"data":"","first_seen":"2026-03-22T15:21:51.538541Z","last_seen":"2026-03-22T15:21:51.538541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitfufugold.com/","fqdn":"bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T15:21:22.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 22 Mar 2026 15:21:23 GMT\r\ncontent-type: text/html\r\nlocation: https://www.bitfufugold.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KF%2FZAQ79aXhSuURpbcDjPFXeIif3Rz%2B4j7se3EL4KIaTry8rPz%2BTCVIhbxhueDaX5H7DslOBMfp1B%2BQMIM2MQSuCq4KHgP5ewO%2BfFchJ%2Fw%3D%3D\"}]}\r\ncf-ray: 9e062f8afcd0481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":50,"dns":22,"connect":8,"send":0,"wait":627,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitfufugold.com/favicon.ico","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:26.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bitfufugold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:26 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 19:40:36 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yg4TSGrpZz5rr1tkkIqPoo%2BMbi2%2B5aazpEPhgph0d4wiwrhnAJLKF9dGRGMLZvsD4jXwU9nBjE%2F0Qlm%2FRue%2BZJHu5QaXYC0rlnFJvQCrd%2FsJkyg%3D\"}]}\r\netag: W/\"69ab2db4-423e\"\r\ncontent-encoding: br\r\ncf-ray: 9e062fa2de5b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"3bcb5a0b2c5aa29fe2c412fc8220ef47","sha1":"dc89d089e28b00f4ef2f41582ceb455487227590","sha256":"e88c55ac6fdf7dddb438482027dc086f64e21fd3a3b633df5cfe0769458d9ab6","sha512":"8c26772105799304232f28e4e6dac529c6d5495ccb07129901b1938347ab11528d785adee4f13efd53f5a7b9bb2d0ffe67877abade1d23f1235ba3d88bc2867d","ssdeep":"96:aU2nVP6UrcehegKpEOh7rkBBTUimSQ/Jr2m1xTjO4mskpblqxNB:aZVPXr3eZpvXZ7r2mvO4mdINB","tlshash":"0d72097d7ad98e89fc71a430aa42c1728295ff355c0432106ed7b70e4e3ba7ec806683","first_seen":"2026-03-22T15:21:51.526724Z","last_seen":"2026-03-22T15:21:51.526724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/sync","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"POST /sync HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bitfufugold.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer bTLxuv0JqtdBjknt/HvryTlAcz1bHRoYTIG9LsBsKhdAQK5vIk3vP8sJDeoK5xV0J1B5nIMaHFKPtdrZo5uctF6EL7Mm0nGoloDQXbfO/k2oeSbYksuoWZnkX59jnIk2KwZY25wJvEYI2WofljbKefc8B7svCphNfR9mi/Xl5pw=\r\nContent-Length: 88\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"87X1Yzm2BFRsE6Rf+rGyGFdwW+oNjSPJqTOzH+QwcYa+rSKBfZuFsIzMmBoqpviCDBGYAohcelAt75KPMV/6pA=="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4UtqIuY3vTUNw1c%2FMC%2FCnU6RW9LeJ3x7x3Ij0Dj5M8%2B1VhdW5pZYY5ZSvQJySWyyIKW7%2B%2BvS844bTEvhVpiHJsVBlZkH2%2F7avB0g3Bu1zTDQx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e062fac3a3f5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (3480), with no line terminators","md5":"57d1728cb6de84baeb0525b065d31f9f","sha1":"9f6ceb226b66f91f25bdfbabf73ee6a0f4740d4a","sha256":"a72264d4b4fffdd9fc02a6033b363563c3b9db147b28040b967959aadd5b3d60","sha512":"06e8afaedbdd851edaa642c129254ec42cc1b05b06a06076237dcb0fceba6105864b67dbe194a054816f7e622e8fb3a79a9119fb7519d0656ecd5d54931ec6a4","ssdeep":"","tlshash":"09715c7ad18b4ef22a1f04615cde2fe9d82389117f5dd63d14e851b626aa98102f62d0","first_seen":"2026-03-22T15:21:51.528044Z","last_seen":"2026-03-22T15:21:51.528044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitfufugold.com/static/css/main.a6ea4600.css","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:23.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET /static/css/main.a6ea4600.css HTTP/1.1\r\nHost: www.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bitfufugold.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 19:40:36 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVZzuoyl1WqtvTnQVqiEXJ2XuRKKpxCEmuTjUSWvaoFInDynUDaDEgF8DOq1gUuty2CNS1g%2FmtN%2Bn38stdJIG7zDJ5Ly3TWLJ24IfMcq%2B8KbhL4%3D\"}]}\r\netag: W/\"69ab2db4-92b\"\r\ncontent-encoding: br\r\ncf-ray: 9e062f947de75868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2302)","md5":"299ae935132d9fa38f9a37d269829989","sha1":"359e22545156798ed1e56d3b5e4f4431920aee2a","sha256":"163e0fd99e99866d7f59dcc3e143469b9cf63e62d88c8875fd664109810d9e78","sha512":"caeb76a762db2106aba469588f79a3f3dcae71d991bdeefc52815c6bfd7c847d6e9dd53c70bfaea08a90de4122dd1cd8335360aaabab7e0c925d6bb9573754e2","ssdeep":"","tlshash":"e8411035b251252ed023ad2e9ed845e8d525c01be3a39a0cb10c362ecd9ece6073db4e","first_seen":"2026-03-22T15:21:51.528998Z","last_seen":"2026-03-22T15:21:51.528998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitfufugold.com/logo192.png","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:26.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: www.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bitfufugold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5631\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 19:40:36 GMT\r\npriority: u=6,i=?0\r\netag: \"69ab2db4-15ff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijopURxhzDjaluyuk2alO3lsSEaw896Z27%2BqDNWPai47fFRaQovWos%2Bwxyiu2V6qCE3Eu8lq1GiRFaggrFCNcXJqY2uWv5ZpGFj5NpX6NWggcNo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e062fa2de565868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"31eff090ac2197fd2084dc7b856f37c3","sha1":"5e82f58bcce8bc8d69c8e5c999118ae218934b72","sha256":"549a0b348c9e1063a7dd87f732225d28c242ab8d34a9df57747828b64b7f4ca6","sha512":"0f53274074e25df2a746ee07a74bfb5462ced22dc377453c447600830b8a636c6a0361c4895e8cf1ca68d8c98ad0da153e224280ed4cbb35d4dd3d245c319f15","ssdeep":"96:cNkSNIuBqNaS+Gdn9W+sWGq2KN1uH6ANQuPIZ2m+5k7LGByc4zVzBcWyQdn8:cNDNIuBqJ+Gdn9WAGw18dQZZ2mEB69Of","tlshash":"25c19f72b110ed87f3a6a5b51a5a45457cd3b58f860a3ad76b43c5d0cba2bc470c2345","first_seen":"2026-03-22T15:21:51.530016Z","last_seen":"2026-03-22T15:21:51.530016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/getLocalization","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"OPTIONS /getLocalization HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.bitfufugold.com/\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization, content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 18000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5L%2Bwdjq0fRq6CAdBzGcx1l9Zq2WDHTGWCa33kFNTXE9rrDmaN66WZvVROaEkfOo%2Fd41%2Bde%2B82Ium1jnHH7ImV4JRl0EukzjQM5wGEQgLWvN4y9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e062fa86ae65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/sync","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"OPTIONS /sync HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.bitfufugold.com/\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization, content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 18000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrIdfXB7poGz8rkQgOGA64FbWg0fhXlzIR6crqy0V%2FfUa9LronKWQ1URZ%2FXufHf%2F%2FmfbcJKQNixqKIt5yMmPzmnLSmzVg3VVb2okKGrD8AAe9as%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e062fa87af65868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitfufugold.com/","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T15:21:23.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 19:40:36 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q60AbWzbpEEoLHL8i64%2B6moEOtP72z6tzut7QhrFdeDG4rpPB%2FpZsICP5YRWLdt3%2BRADB0trIZgV%2FXmqmALFxYsHJihnZ31LzhzO6Nb2VNoipa4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e062f8f69bc5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2757), with no line terminators","md5":"2c9f8185a79d7e4a62bb52db2753803f","sha1":"8cd7159ea4e8d710c5c633e12230017a0bea0cfd","sha256":"e26a4db685d9987fc777332666d0699a019dba365f150e93a9ece18393d16f79","sha512":"e4b964257d842937ca49e4b8a7d9cdcfdd20ef50b55f85fd53778814b088911894963739a58c4163ce53e3fea053312738c82f94323cf2fb64d0760a02bc69d8","ssdeep":"","tlshash":"1d5167b34862c52b123306b4e5ee7218c539c85ac3179d1df675259e46c0f89eab363b","first_seen":"2026-03-22T15:21:51.53101Z","last_seen":"2026-03-22T15:21:51.53101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitfufugold.com/static/js/main.6d8aaf25.js","fqdn":"www.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:23.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"GET /static/js/main.6d8aaf25.js HTTP/1.1\r\nHost: www.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bitfufugold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 19:40:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFGEtEdA5VK7FWCXPmN7jOqCg5UElAW9VSHg7osBcNS64vAQ789GOImbGtd4HvdsOZOQsh4SRnbSBAhbSOXalSJcFi5HD9FpTLcLDaXRFEpQLCA%3D\"}]}\r\netag: W/\"69ab2db4-24e3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9e062f947de45868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2417602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"945868874c2d52b34bb1f047fd85000a","sha1":"b09d3d6dc266dde948eaaa5f8bc925c47a2c0324","sha256":"669e1eaa97aa4403cef85b67be85ee5801c43669efe9e4e20093f248bba61a54","sha512":"fdef21b70870c5c09a68480f62117edf4b4053eeb9dc9f4af3c864372083d23b6cfd8a859e4321d3cc1707174d0db76ac9262a80cf7f9c9cf11320f43f4acd20","ssdeep":"12288:DgBdWAZDhcBSBYyFLXmjf6yEq4TyeThLL+moIfgJ5d9iwHQoIQdg03:mZXmjf6yEq4TyelX+ZIfgJPBQJCZ3","tlshash":"332538c53391f1a547a200e2507f0407f37aac2f680c5494f7a4e9ea787999a617ff3a","first_seen":"2026-03-22T15:21:51.531998Z","last_seen":"2026-03-22T15:21:51.531998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":952,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/userTrack","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:26.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"POST /userTrack HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bitfufugold.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer UDai0q9SCzOlgEbyPrN1IlAcvJzMAusAM6w/4ElKQ/3yT5NmRP+cFi3/51PG3n1kGtTLLi8TvqA59gDXgCtM88Kvm1knJHO6N7Z8UORK6TzC4YDpXUkyjfJUWplEXTy16lTCXBbqdDBbRC7njsWKjdZ+jPZv9BSAsg4fqHQsiHo=\r\nContent-Length: 536\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":536,"data":"mJwWzGNTDS9Pc3K4ITJjXh1sZXJDm0+1Kms+WiNPW9LTtwBELkXOq77CLbhiz8WqbKjk7TM5nD4z8azd5xvtHeJ8lOCyYQI2Zb4pSCZhv72DiDK/EDcyp4NuJ/wODk0wCAj4R4ZxUEpp3WpRUzrzlH7arlJ+FIDVBjY9GRbRDze58KRwVYAGSvsjNAGGe6KOuQjAfvRt70I+rJgukwsOLmmLF0r02XiZ8UYlwxAgS2NyTLYCjOkBnfLKcPxVndeQlYzAoS2prjq3ToiX24Pkg8WjMM5eIkkcOvcfe3taKyqSyn5mczdm96GmVhz7sHoovh2JZAfjT4MwcUgrdA12/l6bTDLeHuSs0I1EYS+ucJsbGceOtGaBIuktYpzL2tS/GehBnjW9Q7S6WDbJ8O5mPfmedyFIvC8LfAR2tecp4wmY6IVcdT8sEMH6hPSFbYOrMJgJJOTaLckMhxHb9pApNm29OvyjRMp+J0zWJ+bBL6USLBUiQe4sE7Xy/Tx1XcAdRlKC9Zr6r0ln/X+Ok20YXQ=="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:26 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMCeDb7I0NkO0Egw%2FLbrCHCQ479AJPUaASQwp0VWzjw8D0YEYtvVLUPabr5UQDb97PMqsKqPAlbO9xViuW3NU1MRhAuKxXcsFRCGib2OVfkwKO4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e062fa67c44ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"cf08692dceb991f7a990123be18281b4","sha1":"a1eb5b2e439b07b5036cc6ccfac8749730bde05f","sha256":"772a0977cace6193b6edf2ff45a6a3d933e50de346892cff2703d9a37ee803d6","sha512":"af8015586039934aa115aade54f2124631785ee9dfda9007d5624becb35da4407af188ed2de4c08abbb2309700bcb1aab9993eef4ecf315504fd9d0f13e8fec7","ssdeep":"","tlshash":"a7a02200a08c0c80080cca08c0a000e888308202ec02fcb2388cfc880e038b02282e3c","first_seen":"2026-03-22T15:21:51.533033Z","last_seen":"2026-03-22T15:21:51.533033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/getAppConfig","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"OPTIONS /getAppConfig HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.bitfufugold.com/\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization, content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 18000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZzXXl%2BRtjSJifWi%2FYeDsNWgvnEPRv6O97svqhxx3R5WivsQOfd2Z3oM%2F9wQ%2BSB3CrO6X6vyMebyW%2BXZIoy%2BlPlYEv8%2FWmiWA6rPjcGL1d8rFxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e062fa86acc5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/userTrack","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:26.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"OPTIONS /userTrack HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.bitfufugold.com/\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:26 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-methods: OPTIONS,HEAD,GET,PUT,POST,DELETE,PATCH\r\naccess-control-allow-headers: authorization, content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 18000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIAkdEDn5%2BpiNJf%2BKyfFNgEvQ0u2jKJUC0tdJSfVa1F59DQZaYObO6mf4GiMm%2FTbZyEXOp%2B3F%2BS00PAzekgn3PQBPB6sfqq%2BqF2THMa3rlLVSWY%3D\"}]}\r\ncf-ray: 9e062fa2a89eddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":72,"dns":41,"connect":8,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/getAppConfig","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"POST /getAppConfig HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bitfufugold.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer EFJqvXzH5ShWsNn99CSx6Ar4Lh8f6/OXsydPrANJ20ponRrFjtd3popX61cG4FvGoBJ0mlJNMiGO+JCO7Qg2F1IwMRchtdK270V3jxvmhArZ9YXPEPjD0YGC6Ay9EfSiHVj6pHeJN7MSKpdqmrboThGuTJI1T6YgMDrs4S2z1y4=\r\nContent-Length: 88\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"DjSvxEJdMnurIxbrT59yJxzTF5/3O9QOzDL6UYzly/8bWG1WPl90T/KKj1Ke6qkP0O0FcPWloQLbGKQ75sTfow=="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2rIqVhjm00MmhXj44KubaU8UiK34RllIEkdCqV8YI1pIcmPlY0o6Ciw4LKC0IbSfkQL6M521ycAVTrs%2Fhhg3H43Tm0Dw1xvaTvFC0iQ957GHME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e062fa97cf15868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (448), with no line terminators","md5":"65207841239537e6a4faf87cdcd11c2b","sha1":"53d1b95104ad262afea91088a89a81e189804faf","sha256":"0db704ae7aae53644643f6253bff423c05ec9e6573be3e9dda53e014cf436639","sha512":"a9c2eb0f86298066d53a1d6afa44cefa309fd805c91fdaa423c772a541816c3dfdb83c68fe0c769c8f3a0c9a65c5f0e1326116e1072f6e39a875ca1b8d44ca31","ssdeep":"","tlshash":"e1f02324403a22b999e22ff112128b4f5c9cd7895c4d62838a7f5b647ec76d2a250d30","first_seen":"2026-03-22T15:21:51.534422Z","last_seen":"2026-03-22T15:21:51.534422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bitfufugold.com/getLocalization","fqdn":"api.bitfufugold.com","domain":"bitfufugold.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bitfufugold.com/","date":"2026-03-22T15:21:27.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitfufugold.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:41:48 GMT","end":"Thu, 04 Jun 2026 16:41:47 GMT"},"fingerprint":{"sha1":"0A:F6:2C:42:41:2F:C4:9B:88:E1:4A:DE:35:F7:E4:FB:DC:4B:AD:B5","sha256":"92:87:4F:94:B1:35:66:7B:38:36:27:58:AE:2E:21:29:93:F9:35:F9:A1:D6:03:E0:9F:7D:1B:0A:79:8D:6B:6B"}}},"request":{"raw":"POST /getLocalization HTTP/1.1\r\nHost: api.bitfufugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bitfufugold.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer fZ31QeF/Sr33Fu3yuic0bzzqiA6XDkKzo2z/fC6u/0zPoFfiMrSMBK92JRfG9mh+3sU1qhOT5loiO6UVIpa5DiDg6zsNoWOTa44i+SWVLvh/DJoLZGARh0FVMwAZulXvCtLiEeLOWdQaIjj0MkNLJlceQDIxqORvYFl/oOC6sZQ=\r\nContent-Length: 64\r\nOrigin: https://www.bitfufugold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"yDflSyMUs58WdC5MVwUcPD1UNhP/EG2MHzY9UHCc+QhZ9JiAyqHgEanweUVxQELW"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:21:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bitfufugold.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuUMagqK9DzlmDEj17F%2FZGbQREXJvHPqySnlDkj1oDRSdGcX4fl%2BIJJmjauQdBRWpGNxKkL6Fuwcg1TStsPfJ0Hk2VXO4NB4wlv0coZfW5YUBqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e062fac2a335868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (1260), with no line terminators","md5":"f1907ee0e3777e24be94c115e3075851","sha1":"da329a396c5025750457cfa7e63a101cb24995cd","sha256":"b85b265a7c65ca4cd5834376ec55c17db961f98686cf5bef6e5afdfc8cfe977a","sha512":"8894b9c78bd305fc543ce82da6ee7544067f79cdde1d35a7bdf6dcbd44d86bb4db1e321e13f46d41483c77a9d4048149a6a281e67c0406bb01b25b55360f0291","ssdeep":"","tlshash":"a4211aedbc17cba1820b43c53b49c7ba69554c721c29c94c7218a34240963da8cf79be","first_seen":"2026-03-22T15:21:51.535955Z","last_seen":"2026-03-22T15:21:51.535955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.bitfufugold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}