{"report_id":"0b550f4d-222b-4ff9-9e00-7d61441c2322","version":6,"status":"done","tags":[],"date":"2026-02-07T12:34:50Z","url":{"schema":"http","addr":"zoinbase.fun","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zoinbase.fun/","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"title":"Burger Community","dom":{"size":8549,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0ec63a19f902062018cb5ac676c3dcbd","sha1":"6b97bcefac9f0a86cda3fcecec7dc59d6a8abdfa","sha256":"4bee039e56ee2e2256a9dd99e8ed04029790a64f4c9f2642e82bece1be0d5dcb","sha512":"2dde2e26e3b738960d8acd80c322229a8e78b81b85b367549bd100dcb6d3e23b3245548994b38bfa072de8d8e6a845ce21ce26d2f25ad0b218811b7da4a01a6a","ssdeep":"96:nrXLJ0oSrdSDS9DrRhqq3TqNeAs8dwKkxMKyBw6RM:rt2gOh9KkxMst","tlshash":"da02bc6068f5216756e7c2d376722b2b6ef1ca53e6561400b1bd0ad28ff7e42cd0349b","dom_hash":"domhash207f9ff2bdfa1c86ba0e4ddecb143ba0","first_seen":"2026-02-07T12:21:44.591447Z","last_seen":"2026-02-07T12:34:55.060165Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoinbase.fun","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T12:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-07","alert":"Hunting_JS_WebAssembly","trigger":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.mapbox.com","ip":{"addr":"52.84.50.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2003-11-27","domain_rank":20157,"first_seen":"2016-05-06T07:04:41Z","last_seen":"2026-02-04T20:38:55.533582Z","alert_count":1,"request_count":2,"received_data":1386700,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"zoinbase.fun","ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":9,"received_data":279519,"sent_data":3924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Mapbox GL JS","description":"Mapbox GL JS is a JavaScript library that uses WebGL to render interactive maps from vector tiles and Mapbox styles.","website":"https://github.com/mapbox/mapbox-gl-js","common_platform_enumeration":"","icon":"Mapbox.svg","categories":["Maps"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.js","fqdn":"api.mapbox.com","domain":"mapbox.com","tld":"com"},"ip":{"addr":"52.84.50.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"532cc09a0fdf59976320bbdbf0b56549","sha1":"81a9290e8eaf622ea422783f1d6cb9a929aad4b1","sha256":"0c2e67e820d6b9b4ad42a3ce9c73f43a9a4a430dd472f7c62f5cf58fd7362ccd","sha512":"36b3d1310950c18000da833add9bd0ba79e826366ee3eae287c4d7e50d1a3b963e17a0cb19f9ce16da644c82354721cd683f92a1c27b262262c45ccccaa2ac75","ssdeep":"24576:wPVkmA8FvPdyAOmexrIHwuVheBwxIWpyS71oceo5ryroWFYS0z00FP97r/cV04i/:wPVkmA8FvPdyAOmeZ8wuveBwxIWpyS7n","tlshash":"4c557ee53151682287d352d614b50183f23a5494744a889cfb3c9cffbeab84a72bef35","size":1349736,"data":"","first_seen":"2024-08-22T17:18:19.654394Z","last_seen":"2026-07-26T05:40:28.028278Z","times_seen":100,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-07","alert":"Hunting_JS_WebAssembly","trigger":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/script.js","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d472b49eb90fcf16d5e4004f2c22f032","sha1":"c67eaa2ae03fc625861765d9e4f96fd7ef0995fd","sha256":"c605e3cdf5ad7dccda28bc8c05df0d39286bcd16ea9678b8571b6dd7379c90a4","sha512":"63fc14ab4b017d366667c5bf1fc3e09f35f5921f80d60dde6d25fa41acdf66ea457e737674d69b71b6fd407856d6f80e2d0acf2ea15c419fde4ccda637f927c6","ssdeep":"192:63KCDgzgfn89qpdwf8NnFQGNmFH7yMgz8HVgg7IgW4z9MDT46HPRczISD6l3UV2W:63nE3cDKlmqIOOT46HPRcBOtoz","tlshash":"3a4263ab617662f1c0ab52fe538b468d7a31808729d2e5513e9d43480f84edc96f2bd3","size":12739,"data":"","first_seen":"2026-02-07T12:21:44.620063Z","last_seen":"2026-02-07T12:34:55.063098Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoinbase.fun/unnamed.png","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /unnamed.png HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: image/png\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuo975\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: CDJlmolbS9GGP4pCrJsmnA\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 11921\r\nage: 791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQ7GZ3Ex6Z%2Fo3QwY2zTeyZfjTwBdB%2BmJsERKHeavxGI3Zd5eORE3HVZjUtMMwf8L%2FoCe68NOaMMpqPVS5Ey89SZz2laLjOvjB54rjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ca2ebf45b61120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"0f57e59138b7b1f8af08e4713e15250d","sha1":"2572c0a858a81875cd938a58b8b9d9ead4457fb0","sha256":"fb3004e32a4f349cf42aa889318e27739844dc24e41a74efb64d5726f4b7b355","sha512":"fe0d68b3d74be1c828bb1f2f154395b22342d202a335eb31c95b9458a39c01637a0b221326404ed5a0b3dfb291ad3a0d94e39e25ee2819f221efff160b90b125","ssdeep":"192:mShZamFMjhVhDgBPPuMHy0/Tcr6iKSaJZzUDMBW0CGhraZ1:mwrMjJgBnuMy695ADObw1","tlshash":"2632be8803a39ebbf1e70ef114c46e7153484f26750b672b04b110b91e7b7ae604ee21","first_seen":"2025-04-24T14:35:36.894272Z","last_seen":"2026-02-26T21:46:07.510795Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/image.png","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: image/png\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuo1pw5\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: HZPB9aqOT-68sOX6m3z_FQ\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 80213\r\nage: 791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZPgtB0TMs%2B2qJv7YBO0g7uYvkM8yQNDS0R4Etre%2BZaJy1wqqo2OtcR4Bc1DOEPoEvghajK%2BAs4uaTkh7cMM%2FxuhmpZ%2F%2FRHkdehViQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ca2ebf45b62120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1324 x 942, 8-bit/color RGBA, non-interlaced","md5":"25595990f3ef85fa552a14c0862dc3b1","sha1":"db55f9666a6537f2c83eee488e4f7f5b86cac6dd","sha256":"a78136f9a86740cd7922ce3d4359f40f71b9a913a87a8ee26acd7cf7a8d1126e","sha512":"fcf83dbbd28c52b749b56ad37c197f962af79a1e70db63b574a4395f3f04d9dfcaed6dd55fabfa938bb3aa92ba6b2cff2fdefedc01fb091892f405800f9473ad","ssdeep":"1536:bxpiUXADfTZfaG/Oj/fd07ZtLE2ZttftGtktttttttttt64BBtCkau5WautSutt3:b/EDfTgG79tL7ZttftGtktttttttttt6","tlshash":"d973e152cab6d875eee6407e6c2c4f3f3b6708c7a689030523ae513cf85dd6ca40ba51","first_seen":"2026-02-07T12:21:44.608014Z","last_seen":"2026-02-07T12:34:55.061983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/script.js","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuo9tv-gzip\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: KfWeH-zWSzy4CLCXss7a6g\r\nx-xss-protection: 1; mode=block\r\nage: 792\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wl%2FuFABllWcHUelmVLy2nYjC7izpFaZwQQURz0qM7KhYpKRb3wMFj0dTS3%2BoKvjDR8kY%2FoE1cjS1OXf9BYV0wlmZFkkwn5a1pSDqVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca2ebf45b63120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12739,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"d472b49eb90fcf16d5e4004f2c22f032","sha1":"c67eaa2ae03fc625861765d9e4f96fd7ef0995fd","sha256":"c605e3cdf5ad7dccda28bc8c05df0d39286bcd16ea9678b8571b6dd7379c90a4","sha512":"63fc14ab4b017d366667c5bf1fc3e09f35f5921f80d60dde6d25fa41acdf66ea457e737674d69b71b6fd407856d6f80e2d0acf2ea15c419fde4ccda637f927c6","ssdeep":"192:63KCDgzgfn89qpdwf8NnFQGNmFH7yMgz8HVgg7IgW4z9MDT46HPRczISD6l3UV2W:63nE3cDKlmqIOOT46HPRcBOtoz","tlshash":"3a4263ab617662f1c0ab52fe538b468d7a31808729d2e5513e9d43480f84edc96f2bd3","first_seen":"2026-02-07T12:21:44.620063Z","last_seen":"2026-02-07T12:34:55.063098Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/favicon.ico","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=6,i=?0\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: Jbbgfau9RY6UxyldjUJq2g\r\nx-xss-protection: 1; mode=block\r\nage: 791\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5NcQwIOopmh3oMA5qS2YlaQhDT4nj1F4YDEL9xzj%2F%2B71a0HUpgpJNJ2I8VCpz%2FkEoShcnjkbrHVeWd4%2FMGwi8o9XARFAVGSUgBomw%3D%3D\"}]}\r\ncf-ray: 9ca2ebf74bb7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Mapbox GL JS","description":"Mapbox GL JS is a JavaScript library that uses WebGL to render interactive maps from vector tiles and Mapbox styles.","website":"https://github.com/mapbox/mapbox-gl-js","common_platform_enumeration":"","icon":"Mapbox.svg","categories":["Maps"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8575,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9ecb2df689f1456576c428a349776284","sha1":"90f8118ecba21405f4091f73b9f10948c8f0bfb0","sha256":"1a05cc84cab850b98de6f3f23047c6e39562c8cc0c3ef89468cf81d19a93dfbb","sha512":"ebe03d9e5144208a349067068524c404176c5c4a64030d4b0764db51e081b26cc43ae034fdd8a76fce55ef10902e7380cadd71529387e054d6ab70f8db0426c7","ssdeep":"96:xXLJ0oSrdSDS9DrRmqq3TqNeAs8dwKkxMdvySvw6ivM:xt2gOhKKkxMdr4rk","tlshash":"7f02bc2068f5216746e7d2d376722b2bbef2ca53e6561400b1bd0ad28ff7e42cd0355a","first_seen":"2026-02-07T12:21:44.602607Z","last_seen":"2026-02-07T12:34:55.06372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/download%20(3).png","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /download%20(3).png HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: image/png\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuo2fza\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: KoCR_FCoSRikcfRX5nX1uw\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 114022\r\nage: 791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtnZKCS32CLUwJ530u6qhE%2FdFcyui4Ug04YDaAFlObypjlGSJB8a8H%2FhN0FrW4LK9eNOLgr3TQfkNvh8ykk07naMoRuQz3HJF7jffQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ca2ebf45b5f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 583, 8-bit/color RGBA, non-interlaced","md5":"47cdd3ccddc37658db6e3377828a0e24","sha1":"151d69bea0f4f05d575efba45b3f5768d951bb6d","sha256":"cfa275067d91b4d600c2c150b090f92aa5f4aa7e7bdeb1a3bc84da8da9775d21","sha512":"42e0543bbac9bbfd5880302fdcf1246e5afbeea4f6c19ef10f06ff3927d5050335e71181cc0ed2df60347e7577d1b9d20767a4f72af094b17347c901ae7789b0","ssdeep":"1536:igTl3OGMie+QVQROTDiJkErh3F8LqxuZilO8ltpUiwE/aL9/O8rvgge:/8iaVQ43iSk3+ixtp/3aL0qvgge","tlshash":"0cb31243da847177a636f3d3aed7f487e9ea053852ca0e34d8bdd93c06606927658c80","first_seen":"2026-02-07T12:21:44.618439Z","last_seen":"2026-02-07T12:34:55.064351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/600x600bf-60.jpg","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /600x600bf-60.jpg HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: image/jpeg\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuoajp\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: 316DxafQSPeJHp1ArJsmnA\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 13669\r\nage: 791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJzLou%2F0vDQ4bvL5W9qpRUq9rdG%2BNbY8EmlY79jE2gedUN5aIDEHjHr0wWtb815HuxRlZUi7YOrfLHxaBvxlkdhH6SJ1W%2Bluqk26qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ca2ebf45b60120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13669,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3","md5":"ec99da88236bd2ff4520e57b589afaf2","sha1":"bc1af33563e894719251b21aeb615a4b80238560","sha256":"dc9fa3210c941abf0c0febf3aecb6b4a5fc6dba3518804c7bf4bf00ccba5a95f","sha512":"202079ce039a4b80f1baa0c8bbec143ec851506021acbe6ef4c6dc8cb1e8892208a1026ebf00b232ce9d9927e940f676930e187111bf2262660db455d4f2408f","ssdeep":"192:0kN42To+RAfDkesmd3HUz+MiJqcBv7OZRgDsGMDaD/Dru:0km2E+KfFEzaJBz8gDsGIaK","tlshash":"a65294479c4d8b5b507887b4be074f9d2f4b3e5c95916aef20220e9b3a30662287e64d","first_seen":"2026-02-07T12:21:44.59428Z","last_seen":"2026-02-07T12:34:55.064961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.js","fqdn":"api.mapbox.com","domain":"mapbox.com","tld":"com"},"ip":{"addr":"52.84.50.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mapbox.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:84:3C:C6:17:14:43:3B:EF:4A:BF:36:B3:89:42:C5:C4:EE:F5:0E","sha256":"DC:F2:DD:A0:03:7E:7C:C8:C4:D9:D6:43:6A:51:4E:C2:3F:0D:81:59:BA:82:0F:87:FC:29:1E:D1:8B:17:44:84"}}},"request":{"raw":"GET /mapbox-gl-js/v3.3.0/mapbox-gl.js HTTP/1.1\r\nHost: api.mapbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 19 Sep 2025 03:14:40 GMT\r\ncontent-encoding: gzip\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: \"2c5584642588a97ccb026d5397874565\"\r\nlast-modified: Wed Apr 10 2024 10:59:03 GMT+0000 (Coordinated Universal Time)\r\ncache-control: max-age=31536000\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Rp0fo4UfvOlhIqpaTk4CiXMrkzpuREiq3fvwpHeX9tS91QCs9VFwyg==\r\nage: 12215989\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1349737,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64108)","md5":"3bd88f6e3d12071f436d8c87b8f73bea","sha1":"cb9f1419940d5ad4bd38605171177e309d27d1ed","sha256":"6b30a2d3559aa76d7924b2ba41aeec4b0674a5398b528a9d7cdb3c61a7031ff8","sha512":"b4e644ac59c7c59826072f9814e979549018db0602933a9323403b54d90b5d6a5695792cf0c28dc89ff32778a78a64a94772eaeb023f49ea340656b5f7b728a2","ssdeep":"24576:wPVkmA8FvPdyAOmexrIHwuVheBwxIWpyS71oceo5ryroWFYS0z00FP97r/cV04i9:wPVkmA8FvPdyAOmeZ8wuveBwxIWpyS7F","tlshash":"52256ee53152582283d362d618b50187f23a5494744a848cf72c98ffbea784e72bff79","first_seen":"2025-07-31T21:58:55.223731Z","last_seen":"2026-07-26T05:40:27.96664Z","times_seen":103,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":44,"dns":38,"connect":3,"send":0,"wait":2,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-07","alert":"Hunting_JS_WebAssembly","trigger":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T12:34:28.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9Se7SIfgTqP4RHtDuHx13QKJV7FeftOXlANnRwABdwvF1Um7IKxf4SEKLZ1DPKHPIRnlIYiqhT0UNehyFgeCgFeaJ11cBAaMso%3D\"}]}\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: KcNRLsr7SC-daaUam3z_FQ\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ca2ebf07ac5568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Mapbox GL JS","description":"Mapbox GL JS is a JavaScript library that uses WebGL to render interactive maps from vector tiles and Mapbox styles.","website":"https://github.com/mapbox/mapbox-gl-js","common_platform_enumeration":"","icon":"Mapbox.svg","categories":["Maps"]}],"data":{"size":8575,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9ecb2df689f1456576c428a349776284","sha1":"90f8118ecba21405f4091f73b9f10948c8f0bfb0","sha256":"1a05cc84cab850b98de6f3f23047c6e39562c8cc0c3ef89468cf81d19a93dfbb","sha512":"ebe03d9e5144208a349067068524c404176c5c4a64030d4b0764db51e081b26cc43ae034fdd8a76fce55ef10902e7380cadd71529387e054d6ab70f8db0426c7","ssdeep":"96:xXLJ0oSrdSDS9DrRmqq3TqNeAs8dwKkxMdvySvw6ivM:xt2gOhKKkxMdr4rk","tlshash":"7f02bc2068f5216746e7d2d376722b2bbef2ca53e6561400b1bd0ad28ff7e42cd0355a","first_seen":"2026-02-07T12:21:44.602607Z","last_seen":"2026-02-07T12:34:55.06372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":64,"dns":42,"connect":1,"send":0,"wait":442,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mapbox.com/mapbox-gl-js/v3.3.0/mapbox-gl.css","fqdn":"api.mapbox.com","domain":"mapbox.com","tld":"com"},"ip":{"addr":"52.84.50.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mapbox.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:84:3C:C6:17:14:43:3B:EF:4A:BF:36:B3:89:42:C5:C4:EE:F5:0E","sha256":"DC:F2:DD:A0:03:7E:7C:C8:C4:D9:D6:43:6A:51:4E:C2:3F:0D:81:59:BA:82:0F:87:FC:29:1E:D1:8B:17:44:84"}}},"request":{"raw":"GET /mapbox-gl-js/v3.3.0/mapbox-gl.css HTTP/1.1\r\nHost: api.mapbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 21 Sep 2025 11:30:29 GMT\r\ncontent-encoding: gzip\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: \"1d664b5540436e9a46ae3093e1ff9c81\"\r\nlast-modified: Wed Apr 10 2024 10:59:06 GMT+0000 (Coordinated Universal Time)\r\ncache-control: max-age=31536000\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: W6E7Pyf_JAa9qWYyvEjNQdHnEbQpoyVTm9dlzSkP3DstRKFkGHhNtg==\r\nage: 12013440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35681,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35681), with no line terminators","md5":"1d664b5540436e9a46ae3093e1ff9c81","sha1":"f45257cebc53d5a4ae4b524c11d3befaeaed746d","sha256":"a6106854125f061e324e0a1041f25a13c269b901675e240d71132e632c2020dc","sha512":"2b9e15dda8bd087141529a7e7e8e1e919f3db0cbc1a5f01597e5923f815c4e12370e4aceda57391e5f6eb4bceeb892fcdcec6032aef6603f604c862f87c8e19c","ssdeep":"768:Diq6MzQGaJQ+OLBOsBQ+OLBOjAZq43Hzq43Hmq43HY03yaEox:t6MOJlOtOsBlOtOjAn3h3m34Ux","tlshash":"06f28692ab8964afea474a32cd375094b23fd9c6fdbd42d4ad3dc738c2679859307024","first_seen":"2024-01-26T01:19:15Z","last_seen":"2026-08-06T13:38:45.814416Z","times_seen":647,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":40,"connect":1,"send":0,"wait":2,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/cursor-burger.png","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /cursor-burger.png HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: image/png\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuor7\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: JwSP4701QwyeEDttss7a6g\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 979\r\nage: 791\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tinzY9YFS2iAeCg0CFiGnBc9NSljdmO%2BjQ%2FUk3DWrTX8kDmh4HlvJ%2Fs%2BILy8HO7l99S5iqlivb5ukSX4gjDNWxK7sxG0du%2BfC3ZuZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ca2ebf6dba9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 32, 8-bit/color RGBA, non-interlaced","md5":"645459890936e125317e433cccdd21c5","sha1":"ab3bf027164394a9f30fd53298cbe0223fd8c6f2","sha256":"5f02299d810dcf6a6f2b14dc9abb0abe6f7dd160153b5ffc7c03a9f022f9e386","sha512":"4174c6d3a92092cfb686cf933e0a1c94d119fd7f9a24f4f63ac580239982dbd8c7600b09d9580bc63e255b28a86a7f133554944ed1f140df199164ec674ff9e0","ssdeep":"","tlshash":"f5119ce1e377716f83549a6512859108903525f195f542ffd5e5d1b144c808dd4d13c6","first_seen":"2026-02-07T12:21:44.610708Z","last_seen":"2026-02-07T12:34:55.066557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoinbase.fun/styles.css","fqdn":"zoinbase.fun","domain":"zoinbase.fun","tld":"fun"},"ip":{"addr":"172.67.204.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoinbase.fun/","date":"2026-02-07T12:34:29.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoinbase.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 05:00:52 GMT","end":"Wed, 06 May 2026 05:56:57 GMT"},"fingerprint":{"sha1":"17:67:A0:7B:8B:1C:D8:CE:B8:54:63:26:65:D3:B0:19:9E:31:6B:E9","sha256":"3D:A6:F8:B2:81:67:02:B6:6B:AD:C7:54:7F:27:D5:7B:B9:14:48:7A:48:7C:CC:29:77:75:83:52:10:AA:A9:54"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: zoinbase.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoinbase.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: *; style-src 'self' 'unsafe-inline' https: *; script-src 'self' 'unsafe-inline' https: *; font-src 'self' data: https: *; connect-src 'self' https: *; media-src 'self' https: *; object-src 'none'; frame-src 'self' https: *;\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 07 Feb 2026 12:34:29 GMT\r\netag: \"dg6sr8fmvfuody1-gzip\"\r\nlast-modified: Thu, 05 Feb 2026 05:59:30 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: RXMxsATOR_6EWzsY0-QtfA\r\nx-xss-protection: 1; mode=block\r\nage: 791\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msvgfzkvk6EYNvxyN%2FNsyYvdP8jhPIRHI3J1jusDLZU9PSe67l%2FS%2FzwRI8y6UHGGqqSk%2Fphb6UX%2FjeUcePa9nRrCD4TGA07OI%2F8q9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca2ebf44b5d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"219b08bc5df7cde32d794c72f1f04966","sha1":"ffe307cba2866df8048fc2c8b1d2b3aaf7bb4ee3","sha256":"bfa7119a9295afdfb2ab113c8afa9f2aa4227bcec16093d4df7f8eb253384d2f","sha512":"073c454c720e99c7134e98aa05083c3f6bfeb3fa3d007ef8bbeb76bc0f8350c86fee9856403580a4f92d876fa65231f55b03eae04e78f1c1652f2ae6ab83c194","ssdeep":"192:en0bImCKpaA3ZKs10heorYnpV0KH9xoRfF2jV444iCSfLGNXppDsZidEGNfxV6nL:ocoK/jV444iCO6ymhmCN0c4alC6GH","tlshash":"518221966ba30504b91bc9ac2ff78705623cc443910eddad3bd9634c8f4d198a6a2b8d","first_seen":"2026-02-07T12:21:44.605775Z","last_seen":"2026-02-07T12:34:55.067173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"zoinbase.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}